Overview

overview

10

Static

static

96d1d0abf0...8c.dll

windows7_x64

96d1d0abf0...8c.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    96d1d0abf075fa30f7bfd95a12d4752412a89f593c8522740446c4e269fac48c

  • Size

    348KB

  • Sample

    210515-kcx457ldbj

  • MD5

    7c7ec96cbac40a2a7c9de7f710b77158

  • SHA1

    e8f67ea749986b044efaac88cf9ca671d805093d

  • SHA256

    96d1d0abf075fa30f7bfd95a12d4752412a89f593c8522740446c4e269fac48c

  • SHA512

    c8ae056582681789840b3ef5b634ff59b0a469e8394d9e8b8ad4cf0d9a07d3b7931af0f9e982e127b5a650a01c30f1dbf67eb80c0a1b670e218e51bf6b3f4d61

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      96d1d0abf075fa30f7bfd95a12d4752412a89f593c8522740446c4e269fac48c

    • Size

      348KB

    • MD5

      7c7ec96cbac40a2a7c9de7f710b77158

    • SHA1

      e8f67ea749986b044efaac88cf9ca671d805093d

    • SHA256

      96d1d0abf075fa30f7bfd95a12d4752412a89f593c8522740446c4e269fac48c

    • SHA512

      c8ae056582681789840b3ef5b634ff59b0a469e8394d9e8b8ad4cf0d9a07d3b7931af0f9e982e127b5a650a01c30f1dbf67eb80c0a1b670e218e51bf6b3f4d61

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks