Overview

overview

10

Static

static

bd2a83e5c4...51.dll

windows7_x64

10

bd2a83e5c4...51.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd2a83e5c473b3ed87f3e83bf6a4bcb276f46fbf8d63bcbaf671ebf48bc88551

  • Size

    348KB

  • Sample

    210515-54mwx7y876

  • MD5

    a88bc5457d67948a4742e2faba8da860

  • SHA1

    04c3569e0989354fe5a092573489f184794abb1c

  • SHA256

    bd2a83e5c473b3ed87f3e83bf6a4bcb276f46fbf8d63bcbaf671ebf48bc88551

  • SHA512

    c72e61979edacee2088d9254a2b45965646e5aca9f357e4626de3f45a898d2adefd9d32aa331c6b0990073a4380e0f1f8d3fe016eb5b6b97c75bc6d69f4657c6

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      bd2a83e5c473b3ed87f3e83bf6a4bcb276f46fbf8d63bcbaf671ebf48bc88551

    • Size

      348KB

    • MD5

      a88bc5457d67948a4742e2faba8da860

    • SHA1

      04c3569e0989354fe5a092573489f184794abb1c

    • SHA256

      bd2a83e5c473b3ed87f3e83bf6a4bcb276f46fbf8d63bcbaf671ebf48bc88551

    • SHA512

      c72e61979edacee2088d9254a2b45965646e5aca9f357e4626de3f45a898d2adefd9d32aa331c6b0990073a4380e0f1f8d3fe016eb5b6b97c75bc6d69f4657c6

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks