Overview

overview

10

Static

static

c543f409f2...7e.dll

windows7_x64

10

c543f409f2...7e.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c543f409f2fb620a206f1822dd7dac0ee4fb8def382610720a402ca8dcef657e

  • Size

    536KB

  • Sample

    210513-zfmjac28jn

  • MD5

    87d4bbb9cf03ea4c17cc1084d85666db

  • SHA1

    4c011f50a92390526b8b79e2c1dbbf1828e63c40

  • SHA256

    c543f409f2fb620a206f1822dd7dac0ee4fb8def382610720a402ca8dcef657e

  • SHA512

    0abc550b2b4e02133c375e1840827b7ce9a34bd22b7268b2daf144d4f45d9a71d47cd39660036f67bbdb4df394610646f86b149d9f030562c3c295d2f8cefbb4

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      c543f409f2fb620a206f1822dd7dac0ee4fb8def382610720a402ca8dcef657e

    • Size

      536KB

    • MD5

      87d4bbb9cf03ea4c17cc1084d85666db

    • SHA1

      4c011f50a92390526b8b79e2c1dbbf1828e63c40

    • SHA256

      c543f409f2fb620a206f1822dd7dac0ee4fb8def382610720a402ca8dcef657e

    • SHA512

      0abc550b2b4e02133c375e1840827b7ce9a34bd22b7268b2daf144d4f45d9a71d47cd39660036f67bbdb4df394610646f86b149d9f030562c3c295d2f8cefbb4

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks