Overview

overview

10

Static

static

2f9edad6de...4b.dll

windows7_x64

10

2f9edad6de...4b.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2f9edad6de6ec7faada56c72b8ef3cb44d32163502e7e4d4b8213bb58005c04b

  • Size

    898KB

  • Sample

    210515-q4mnrea2gn

  • MD5

    60e1e4c0109783cc4ead8797b9c82c62

  • SHA1

    7d311a616b3f2a8db54e740286a71a5a97df88f6

  • SHA256

    2f9edad6de6ec7faada56c72b8ef3cb44d32163502e7e4d4b8213bb58005c04b

  • SHA512

    f16aaaa6cacfdab65719cbbd54cd1c9ff0a6da79fd8a1e7802ccd9fb2f1b77f57316ae9dd79c46f7babb99643635e78ace4d891fb5c661991c65c8019b7816b8

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      2f9edad6de6ec7faada56c72b8ef3cb44d32163502e7e4d4b8213bb58005c04b

    • Size

      898KB

    • MD5

      60e1e4c0109783cc4ead8797b9c82c62

    • SHA1

      7d311a616b3f2a8db54e740286a71a5a97df88f6

    • SHA256

      2f9edad6de6ec7faada56c72b8ef3cb44d32163502e7e4d4b8213bb58005c04b

    • SHA512

      f16aaaa6cacfdab65719cbbd54cd1c9ff0a6da79fd8a1e7802ccd9fb2f1b77f57316ae9dd79c46f7babb99643635e78ace4d891fb5c661991c65c8019b7816b8

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks