Overview

overview

10

Static

static

a760cd99ce...2d.dll

windows7_x64

10

a760cd99ce...2d.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a760cd99ce64c88316ca87da4f034a671b7786dc0e79872385d15a27d0ed9a2d

  • Size

    200KB

  • Sample

    210515-a53qwv6hpn

  • MD5

    d5d62107e86be9918ad5394e0856d9ba

  • SHA1

    1914af8ef8ecd86d258584012ce8611b156443f4

  • SHA256

    a760cd99ce64c88316ca87da4f034a671b7786dc0e79872385d15a27d0ed9a2d

  • SHA512

    d4759dc36ee3456fa4abe544bd59ff76b18c1516bc814d4e5fb92828b1ed0f4cd99c4c1dcc764290b9b9e9989b34cc036d7b4711430f6acd6b123dd3ad248441

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      a760cd99ce64c88316ca87da4f034a671b7786dc0e79872385d15a27d0ed9a2d

    • Size

      200KB

    • MD5

      d5d62107e86be9918ad5394e0856d9ba

    • SHA1

      1914af8ef8ecd86d258584012ce8611b156443f4

    • SHA256

      a760cd99ce64c88316ca87da4f034a671b7786dc0e79872385d15a27d0ed9a2d

    • SHA512

      d4759dc36ee3456fa4abe544bd59ff76b18c1516bc814d4e5fb92828b1ed0f4cd99c4c1dcc764290b9b9e9989b34cc036d7b4711430f6acd6b123dd3ad248441

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks