Overview

overview

10

Static

static

562f7ea89d...ef.exe

windows7_x64

10

562f7ea89d...ef.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    562f7ea89d02b702bd9d4c890fa087bafcb6b6650c05a8883661e59d7e9e9cef

  • Size

    1.7MB

  • Sample

    210515-1plf7nhxs6

  • MD5

    a975d2b0d2e26f4fcf6d9f8be249318d

  • SHA1

    c88688c1e23dfe20b6f82eb45b35995834d56e95

  • SHA256

    562f7ea89d02b702bd9d4c890fa087bafcb6b6650c05a8883661e59d7e9e9cef

  • SHA512

    6559492f58cc31c71e3c49905a5b26d19cd078935d91ba7f88f0ee2504618119b93b65e62469e2a1dc684bbf15c341222224b7a671a11bc48c8cab1544432af0

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      562f7ea89d02b702bd9d4c890fa087bafcb6b6650c05a8883661e59d7e9e9cef

    • Size

      1.7MB

    • MD5

      a975d2b0d2e26f4fcf6d9f8be249318d

    • SHA1

      c88688c1e23dfe20b6f82eb45b35995834d56e95

    • SHA256

      562f7ea89d02b702bd9d4c890fa087bafcb6b6650c05a8883661e59d7e9e9cef

    • SHA512

      6559492f58cc31c71e3c49905a5b26d19cd078935d91ba7f88f0ee2504618119b93b65e62469e2a1dc684bbf15c341222224b7a671a11bc48c8cab1544432af0

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks