Overview

overview

10

Static

static

8

602b6f21f5...5d.dll

windows7_x64

10

602b6f21f5...5d.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    602b6f21f58e4425253c70404d7939230d058ae7601f461630fc45b4d18f9e5d

  • Size

    593KB

  • Sample

    210515-w8q6f14ehx

  • MD5

    6ade6fd07766bfcee12779da5731f0f9

  • SHA1

    2fbbfcaec9d68129bac35ea6c4638497e1a4aa54

  • SHA256

    602b6f21f58e4425253c70404d7939230d058ae7601f461630fc45b4d18f9e5d

  • SHA512

    b55f8ed44befa1d337839b8ed4cd7ea82d57269873eed3d80bd3c96deaf87b5fe5d71e1c34e81b46e36a631e2b452aaced827c9f24bb002cec3228126a202a10

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      602b6f21f58e4425253c70404d7939230d058ae7601f461630fc45b4d18f9e5d

    • Size

      593KB

    • MD5

      6ade6fd07766bfcee12779da5731f0f9

    • SHA1

      2fbbfcaec9d68129bac35ea6c4638497e1a4aa54

    • SHA256

      602b6f21f58e4425253c70404d7939230d058ae7601f461630fc45b4d18f9e5d

    • SHA512

      b55f8ed44befa1d337839b8ed4cd7ea82d57269873eed3d80bd3c96deaf87b5fe5d71e1c34e81b46e36a631e2b452aaced827c9f24bb002cec3228126a202a10

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks