Overview

overview

10

Static

static

2c7a1423de...0c.dll

windows7_x64

10

2c7a1423de...0c.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c7a1423deec2316a859cdff0c558143dea966df38441bf4a0c89014e7d8e20c

  • Size

    786KB

  • Sample

    210516-cmj3x2v15n

  • MD5

    d84d13fc6011d84aababaeaf543b739f

  • SHA1

    8668ae8acea0362da8a5fea7fe80da9a643f5ff4

  • SHA256

    2c7a1423deec2316a859cdff0c558143dea966df38441bf4a0c89014e7d8e20c

  • SHA512

    01360c6a6f32cff2302ae72315685e9c902637b72c8deb04c7ff1206d5fe39b22e2571a2f9242dca65612bf0b85fc865e2f46c87ac002ead5503aba35b8fa2a4

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      2c7a1423deec2316a859cdff0c558143dea966df38441bf4a0c89014e7d8e20c

    • Size

      786KB

    • MD5

      d84d13fc6011d84aababaeaf543b739f

    • SHA1

      8668ae8acea0362da8a5fea7fe80da9a643f5ff4

    • SHA256

      2c7a1423deec2316a859cdff0c558143dea966df38441bf4a0c89014e7d8e20c

    • SHA512

      01360c6a6f32cff2302ae72315685e9c902637b72c8deb04c7ff1206d5fe39b22e2571a2f9242dca65612bf0b85fc865e2f46c87ac002ead5503aba35b8fa2a4

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks