Overview

overview

10

Static

static

07ba9d3c4a...3a.exe

windows7_x64

10

07ba9d3c4a...3a.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    07ba9d3c4a1ba1ce4b90461cf0d7f166a958facbe115b7bb88c4210054f86a3a

  • Size

    2.0MB

  • Sample

    210515-mrpn14mad2

  • MD5

    a22db3a88fc3874d6b18ce916712c617

  • SHA1

    a2eff36a125c138ea3c85a1f44994825c772c51a

  • SHA256

    07ba9d3c4a1ba1ce4b90461cf0d7f166a958facbe115b7bb88c4210054f86a3a

  • SHA512

    f12fdba2e9963a3139557e82e1000703facb9c7832638a66f8ede521e1cd57bb77b0be4bfd61a4c2bde50d306bf1870404835f23ea5c2e15647b04f3c351bb56

Score
10/10
ramnitbankerevasionspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      07ba9d3c4a1ba1ce4b90461cf0d7f166a958facbe115b7bb88c4210054f86a3a

    • Size

      2.0MB

    • MD5

      a22db3a88fc3874d6b18ce916712c617

    • SHA1

      a2eff36a125c138ea3c85a1f44994825c772c51a

    • SHA256

      07ba9d3c4a1ba1ce4b90461cf0d7f166a958facbe115b7bb88c4210054f86a3a

    • SHA512

      f12fdba2e9963a3139557e82e1000703facb9c7832638a66f8ede521e1cd57bb77b0be4bfd61a4c2bde50d306bf1870404835f23ea5c2e15647b04f3c351bb56

    Score
    10/10
    ramnitbankerevasionspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks