Overview

overview

10

Static

static

4e38c1bcc9...c2.dll

windows7_x64

10

4e38c1bcc9...c2.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4e38c1bcc97ba03c594bdad8e50cb7aa94d577e7c2611c1c2cd3b607619422c2

  • Size

    400KB

  • Sample

    210515-6ed92cd742

  • MD5

    e4e5640c58a5e4d49f953e9af02580b4

  • SHA1

    033b0e7db809fa0ec8209a9451d3c3b9f7a921f8

  • SHA256

    4e38c1bcc97ba03c594bdad8e50cb7aa94d577e7c2611c1c2cd3b607619422c2

  • SHA512

    578d9fac435f213f504ce20919926e13e986e73a52e8433dfbf568439db86b005beef55aba0af4ee7a814f494a4dd5883f70cdd1743e3c8eb7012f9ed4f15c39

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      4e38c1bcc97ba03c594bdad8e50cb7aa94d577e7c2611c1c2cd3b607619422c2

    • Size

      400KB

    • MD5

      e4e5640c58a5e4d49f953e9af02580b4

    • SHA1

      033b0e7db809fa0ec8209a9451d3c3b9f7a921f8

    • SHA256

      4e38c1bcc97ba03c594bdad8e50cb7aa94d577e7c2611c1c2cd3b607619422c2

    • SHA512

      578d9fac435f213f504ce20919926e13e986e73a52e8433dfbf568439db86b005beef55aba0af4ee7a814f494a4dd5883f70cdd1743e3c8eb7012f9ed4f15c39

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks