Overview

overview

10

Static

static

b50c7c5497...ca.dll

windows7_x64

10

b50c7c5497...ca.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b50c7c5497f14f981be644ef82928255a7789fd5ce578cb3e410ec980e62ccca

  • Size

    400KB

  • Sample

    210515-v5n7eklwfx

  • MD5

    7fd8a4f47cbaa168e2657c34133ea6c3

  • SHA1

    48cfbaf56fc25b47436d2639d2f44ad346684259

  • SHA256

    b50c7c5497f14f981be644ef82928255a7789fd5ce578cb3e410ec980e62ccca

  • SHA512

    ddfffdf47bacfe2d1cdee77694a5522c760d423f23a70a320413a67a8baad0ee5dd582e6a6c78298625cc3d77cd9c666e3489c7343f25e2f6e658698e382000d

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      b50c7c5497f14f981be644ef82928255a7789fd5ce578cb3e410ec980e62ccca

    • Size

      400KB

    • MD5

      7fd8a4f47cbaa168e2657c34133ea6c3

    • SHA1

      48cfbaf56fc25b47436d2639d2f44ad346684259

    • SHA256

      b50c7c5497f14f981be644ef82928255a7789fd5ce578cb3e410ec980e62ccca

    • SHA512

      ddfffdf47bacfe2d1cdee77694a5522c760d423f23a70a320413a67a8baad0ee5dd582e6a6c78298625cc3d77cd9c666e3489c7343f25e2f6e658698e382000d

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks