Overview

overview

10

Static

static

22b5f84db0...67.dll

windows7_x64

10

22b5f84db0...67.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22b5f84db0a7ac33a03e66bebae925ba4a720458c29f0a3fa36e88b358876867

  • Size

    260KB

  • Sample

    210515-8hvjdk6haa

  • MD5

    deeebdc4b4cad9430673bc6cc47dd025

  • SHA1

    f9b98d287e8d4b5f3ff1863aba68bcdfc1fdd0de

  • SHA256

    22b5f84db0a7ac33a03e66bebae925ba4a720458c29f0a3fa36e88b358876867

  • SHA512

    0e06e6dc1bebe07b91823f80c8448fddae4315e2fee7d48fbfd1e6ff343dc65426dd65e1e4718083263d8217e1c66f49c8629469a37a47997811a18dc2c09000

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      22b5f84db0a7ac33a03e66bebae925ba4a720458c29f0a3fa36e88b358876867

    • Size

      260KB

    • MD5

      deeebdc4b4cad9430673bc6cc47dd025

    • SHA1

      f9b98d287e8d4b5f3ff1863aba68bcdfc1fdd0de

    • SHA256

      22b5f84db0a7ac33a03e66bebae925ba4a720458c29f0a3fa36e88b358876867

    • SHA512

      0e06e6dc1bebe07b91823f80c8448fddae4315e2fee7d48fbfd1e6ff343dc65426dd65e1e4718083263d8217e1c66f49c8629469a37a47997811a18dc2c09000

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks