Overview

overview

10

Static

static

e0b510d4be...00.dll

windows7_x64

10

e0b510d4be...00.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e0b510d4bed2b2b0dc1368cdb034a5c73f438733e3d46da9b2a8b1a7636e5f00

  • Size

    396KB

  • Sample

    210515-k691g2qv6j

  • MD5

    78c3851122e0b8e9b2f53b9894a5fc30

  • SHA1

    5319909bd20440fc59de8f60cd8161bc585d575e

  • SHA256

    e0b510d4bed2b2b0dc1368cdb034a5c73f438733e3d46da9b2a8b1a7636e5f00

  • SHA512

    05885552af8e1c1beb9842da9bf97ab7684cf8b9423904610d7926269abfe2fc054076610a682659909e943cf37f2139ed57bc070ea01c1e1524d5a50035e533

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      e0b510d4bed2b2b0dc1368cdb034a5c73f438733e3d46da9b2a8b1a7636e5f00

    • Size

      396KB

    • MD5

      78c3851122e0b8e9b2f53b9894a5fc30

    • SHA1

      5319909bd20440fc59de8f60cd8161bc585d575e

    • SHA256

      e0b510d4bed2b2b0dc1368cdb034a5c73f438733e3d46da9b2a8b1a7636e5f00

    • SHA512

      05885552af8e1c1beb9842da9bf97ab7684cf8b9423904610d7926269abfe2fc054076610a682659909e943cf37f2139ed57bc070ea01c1e1524d5a50035e533

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks