Overview

overview

10

Static

static

087e2690cf...2a.exe

windows7_x64

10

087e2690cf...2a.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    087e2690cf320941bd5f23fbdfee6ae692c8518eb073bd256a2106d28f71ee2a

  • Size

    443KB

  • Sample

    210515-kqg3ymtq8a

  • MD5

    dc6b0680a083cc318c5421e18ab207c9

  • SHA1

    0aa198049f41243337c9cc32030388eb1ff58c39

  • SHA256

    087e2690cf320941bd5f23fbdfee6ae692c8518eb073bd256a2106d28f71ee2a

  • SHA512

    e82db9d9718d41b645780e9a6c54703570c1c56440c5d0efb04023d4e254cf1f03c87df9d3bec0317d787af689d7a2e07109ac9eac03f191c8e0ce32f932a064

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      087e2690cf320941bd5f23fbdfee6ae692c8518eb073bd256a2106d28f71ee2a

    • Size

      443KB

    • MD5

      dc6b0680a083cc318c5421e18ab207c9

    • SHA1

      0aa198049f41243337c9cc32030388eb1ff58c39

    • SHA256

      087e2690cf320941bd5f23fbdfee6ae692c8518eb073bd256a2106d28f71ee2a

    • SHA512

      e82db9d9718d41b645780e9a6c54703570c1c56440c5d0efb04023d4e254cf1f03c87df9d3bec0317d787af689d7a2e07109ac9eac03f191c8e0ce32f932a064

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks