Overview

overview

10

Static

static

7542f7cec4...15.dll

windows7_x64

10

7542f7cec4...15.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7542f7cec45fbfd2a61a321c14db755e009b04daf0deb6e292446c9dcb732c15

  • Size

    2.8MB

  • Sample

    210515-aajfqvqmla

  • MD5

    9521ade5583bafeba1591090e0be3333

  • SHA1

    daa6e7b31865680eb4a06c83d820dc2e31b1916f

  • SHA256

    7542f7cec45fbfd2a61a321c14db755e009b04daf0deb6e292446c9dcb732c15

  • SHA512

    bbbd9d8a6f01290fc3d9d1367396a8fffc0cd6b4e02431e88ed269dd136c041cbf81654738977bb86d7e57219eab89711744031018cb8e8f87a05453b2a2aac0

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      7542f7cec45fbfd2a61a321c14db755e009b04daf0deb6e292446c9dcb732c15

    • Size

      2.8MB

    • MD5

      9521ade5583bafeba1591090e0be3333

    • SHA1

      daa6e7b31865680eb4a06c83d820dc2e31b1916f

    • SHA256

      7542f7cec45fbfd2a61a321c14db755e009b04daf0deb6e292446c9dcb732c15

    • SHA512

      bbbd9d8a6f01290fc3d9d1367396a8fffc0cd6b4e02431e88ed269dd136c041cbf81654738977bb86d7e57219eab89711744031018cb8e8f87a05453b2a2aac0

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks