Overview

overview

10

Static

static

0782f299cd...6a.dll

windows7_x64

10

0782f299cd...6a.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0782f299cd3f3504fde7fe5ac338d1a2ade38531a414939e118119af46bb896a

  • Size

    143KB

  • Sample

    210515-2jqzmxrxp6

  • MD5

    b9cf4a0bbf45c41ce6c4b87ab32b42f9

  • SHA1

    49d37c001c9074b79e2938430a3a2c095e74ca10

  • SHA256

    0782f299cd3f3504fde7fe5ac338d1a2ade38531a414939e118119af46bb896a

  • SHA512

    72b794505e23647dab82aca43da27d584cd398ceb40b321bb0e2233f3e842811d1ce7fb600dea97c6fe9fd89fb1513a7de24a9c13760594523fedcff0460ccb8

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      0782f299cd3f3504fde7fe5ac338d1a2ade38531a414939e118119af46bb896a

    • Size

      143KB

    • MD5

      b9cf4a0bbf45c41ce6c4b87ab32b42f9

    • SHA1

      49d37c001c9074b79e2938430a3a2c095e74ca10

    • SHA256

      0782f299cd3f3504fde7fe5ac338d1a2ade38531a414939e118119af46bb896a

    • SHA512

      72b794505e23647dab82aca43da27d584cd398ceb40b321bb0e2233f3e842811d1ce7fb600dea97c6fe9fd89fb1513a7de24a9c13760594523fedcff0460ccb8

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks