Overview

overview

10

Static

static

8

65bf28e516...c0.exe

windows7_x64

10

65bf28e516...c0.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    65bf28e5161e81dfcfc9c2a3da4d05da7de6802987236e3bb9b98c08bf1b17c0

  • Size

    617KB

  • Sample

    210513-mnhy6yzz3x

  • MD5

    3835ea21eec2887fe431aaafee03764e

  • SHA1

    1a9894bcaa6760197c3a57ba14376dc62ac9df80

  • SHA256

    65bf28e5161e81dfcfc9c2a3da4d05da7de6802987236e3bb9b98c08bf1b17c0

  • SHA512

    7b4dea6bf962b6d34d35f165d9575189cf8a18494d89066e7eb7bda98214022a97faac106782bd9f03946d551c8a95650cd59153d1f9cd3804c5d999aa374ce2

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      65bf28e5161e81dfcfc9c2a3da4d05da7de6802987236e3bb9b98c08bf1b17c0

    • Size

      617KB

    • MD5

      3835ea21eec2887fe431aaafee03764e

    • SHA1

      1a9894bcaa6760197c3a57ba14376dc62ac9df80

    • SHA256

      65bf28e5161e81dfcfc9c2a3da4d05da7de6802987236e3bb9b98c08bf1b17c0

    • SHA512

      7b4dea6bf962b6d34d35f165d9575189cf8a18494d89066e7eb7bda98214022a97faac106782bd9f03946d551c8a95650cd59153d1f9cd3804c5d999aa374ce2

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks