Overview

overview

10

Static

static

7bc6c360bf...81.exe

windows7_x64

10

7bc6c360bf...81.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7bc6c360bfd120691855fcd8487f836762c1743e92c4701d1aadeb3eb9001281

  • Size

    550KB

  • Sample

    210516-g253n19xc2

  • MD5

    fa568abfd50409019b91277c69d046e1

  • SHA1

    f54a747f76516876e25041820d9094cb89cb40d6

  • SHA256

    7bc6c360bfd120691855fcd8487f836762c1743e92c4701d1aadeb3eb9001281

  • SHA512

    3b3e26144d6dc558240aa0f4a3cdbb478022cf0ed148438916aefe62f2f2c682c85c3cd6b106cc1f0a95546729105be4f2f7778cfa40bb701d5be4c53a90ba16

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      7bc6c360bfd120691855fcd8487f836762c1743e92c4701d1aadeb3eb9001281

    • Size

      550KB

    • MD5

      fa568abfd50409019b91277c69d046e1

    • SHA1

      f54a747f76516876e25041820d9094cb89cb40d6

    • SHA256

      7bc6c360bfd120691855fcd8487f836762c1743e92c4701d1aadeb3eb9001281

    • SHA512

      3b3e26144d6dc558240aa0f4a3cdbb478022cf0ed148438916aefe62f2f2c682c85c3cd6b106cc1f0a95546729105be4f2f7778cfa40bb701d5be4c53a90ba16

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks