Overview

overview

10

Static

static

8

3a02ab67a8...71.exe

windows7_x64

1

3a02ab67a8...71.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a02ab67a8bfb6121f6968e932504759b462cf479f1834cd23b579ae1448dc71

  • Size

    193KB

  • Sample

    210515-9gl3qn4fp2

  • MD5

    03b17e1b56311e64852d5df83123e8d4

  • SHA1

    f4e96cfad1df5efa065e11388f094d7b5d686cbe

  • SHA256

    3a02ab67a8bfb6121f6968e932504759b462cf479f1834cd23b579ae1448dc71

  • SHA512

    77352fed7f7d1e5f7b3e8403c7caf66fbeccd426ff60029c43147b2932c6e7119f9bc54cd4a9fe0bdc2914f56cdfc3275c8bc66a58038c3bebfa6a58c16a17af

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      3a02ab67a8bfb6121f6968e932504759b462cf479f1834cd23b579ae1448dc71

    • Size

      193KB

    • MD5

      03b17e1b56311e64852d5df83123e8d4

    • SHA1

      f4e96cfad1df5efa065e11388f094d7b5d686cbe

    • SHA256

      3a02ab67a8bfb6121f6968e932504759b462cf479f1834cd23b579ae1448dc71

    • SHA512

      77352fed7f7d1e5f7b3e8403c7caf66fbeccd426ff60029c43147b2932c6e7119f9bc54cd4a9fe0bdc2914f56cdfc3275c8bc66a58038c3bebfa6a58c16a17af

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks