Overview

overview

10

Static

static

69bf015d29...cd.exe

windows7_x64

10

69bf015d29...cd.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    69bf015d296b139c3a20d8ac219dbbabb2f1e9ee6f44c3d1c36a14aab329cccd

  • Size

    1.1MB

  • Sample

    210515-et8z2heyt6

  • MD5

    ad93867ba0fd1f688e6ec043f25d3448

  • SHA1

    60f2311fb773b960162a2069647f7b2e6a3714ed

  • SHA256

    69bf015d296b139c3a20d8ac219dbbabb2f1e9ee6f44c3d1c36a14aab329cccd

  • SHA512

    22eab07de24cbf95ab8af046a8adab89a74d7322f846e84234c5d7c7432d81a7f39da7f38ee2e4cfb93e6f7dbfbcb6ec226b5e159ac1535fa6b70f77d418bc7c

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      69bf015d296b139c3a20d8ac219dbbabb2f1e9ee6f44c3d1c36a14aab329cccd

    • Size

      1.1MB

    • MD5

      ad93867ba0fd1f688e6ec043f25d3448

    • SHA1

      60f2311fb773b960162a2069647f7b2e6a3714ed

    • SHA256

      69bf015d296b139c3a20d8ac219dbbabb2f1e9ee6f44c3d1c36a14aab329cccd

    • SHA512

      22eab07de24cbf95ab8af046a8adab89a74d7322f846e84234c5d7c7432d81a7f39da7f38ee2e4cfb93e6f7dbfbcb6ec226b5e159ac1535fa6b70f77d418bc7c

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks