Overview

overview

10

Static

static

f4e959b3f9...a8.dll

windows7_x64

10

f4e959b3f9...a8.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f4e959b3f9db315de08db40dc027fcf0a4fe2d50389b5a20168b4b4da6978ea8

  • Size

    260KB

  • Sample

    210515-8gjcf2y5pe

  • MD5

    64383fd913785a07726f5f36738ae409

  • SHA1

    75565be1b9bf45b8faa9c9088f03cc84c351e3ae

  • SHA256

    f4e959b3f9db315de08db40dc027fcf0a4fe2d50389b5a20168b4b4da6978ea8

  • SHA512

    cbd2d07bfd560d97cd089b479b93d87cc774c45c32b983fe415b879c63fe801fc9d22c969d5b03eae81e29231db4c02fd499d79b04315deceab696857c2a5ec5

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      f4e959b3f9db315de08db40dc027fcf0a4fe2d50389b5a20168b4b4da6978ea8

    • Size

      260KB

    • MD5

      64383fd913785a07726f5f36738ae409

    • SHA1

      75565be1b9bf45b8faa9c9088f03cc84c351e3ae

    • SHA256

      f4e959b3f9db315de08db40dc027fcf0a4fe2d50389b5a20168b4b4da6978ea8

    • SHA512

      cbd2d07bfd560d97cd089b479b93d87cc774c45c32b983fe415b879c63fe801fc9d22c969d5b03eae81e29231db4c02fd499d79b04315deceab696857c2a5ec5

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks