Overview

overview

10

Static

static

089aa1fd0c...c8.dll

windows7_x64

10

089aa1fd0c...c8.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    089aa1fd0c12deac83b634923bb7942b2e7a861e159d1085c0b6e51505eb85c8

  • Size

    2.8MB

  • Sample

    210515-hat7fw9dd6

  • MD5

    295a235b39e2e9c0764c98710c60509b

  • SHA1

    d7c54e1afa01c8eeeffd8bedea1a0c1b04163199

  • SHA256

    089aa1fd0c12deac83b634923bb7942b2e7a861e159d1085c0b6e51505eb85c8

  • SHA512

    a8b4e63334a4ad0cc6960cd82566ebc7741ed853a9884c1da7a14f6eafc2c14e90a4e06bc9c81da1caf8bd983956e63de537d1a6568e6aabddf13cdba9dd1403

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      089aa1fd0c12deac83b634923bb7942b2e7a861e159d1085c0b6e51505eb85c8

    • Size

      2.8MB

    • MD5

      295a235b39e2e9c0764c98710c60509b

    • SHA1

      d7c54e1afa01c8eeeffd8bedea1a0c1b04163199

    • SHA256

      089aa1fd0c12deac83b634923bb7942b2e7a861e159d1085c0b6e51505eb85c8

    • SHA512

      a8b4e63334a4ad0cc6960cd82566ebc7741ed853a9884c1da7a14f6eafc2c14e90a4e06bc9c81da1caf8bd983956e63de537d1a6568e6aabddf13cdba9dd1403

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks