Overview

overview

10

Static

static

fcaf8d356c...f7.exe

windows7_x64

10

fcaf8d356c...f7.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fcaf8d356cd9c31dc8c05093f18532a8ed9a356a435570554e6ac211f19a95f7

  • Size

    230KB

  • Sample

    210515-hq4mg79wxs

  • MD5

    9dc135d8f028fb7c70933fdec936f419

  • SHA1

    d5e61fbc352fc2dc8d1b8f234801b96e7b3cd04f

  • SHA256

    fcaf8d356cd9c31dc8c05093f18532a8ed9a356a435570554e6ac211f19a95f7

  • SHA512

    95f2462cd33328ace30978f40619b0dfb329915bd68befa2cf62616658ee6444a367fd77ac2b8477eef0fcaf5a4c1c38191c1f07f511e34abd3bbe633fa6f4b7

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      fcaf8d356cd9c31dc8c05093f18532a8ed9a356a435570554e6ac211f19a95f7

    • Size

      230KB

    • MD5

      9dc135d8f028fb7c70933fdec936f419

    • SHA1

      d5e61fbc352fc2dc8d1b8f234801b96e7b3cd04f

    • SHA256

      fcaf8d356cd9c31dc8c05093f18532a8ed9a356a435570554e6ac211f19a95f7

    • SHA512

      95f2462cd33328ace30978f40619b0dfb329915bd68befa2cf62616658ee6444a367fd77ac2b8477eef0fcaf5a4c1c38191c1f07f511e34abd3bbe633fa6f4b7

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks