Overview

overview

10

Static

static

a4f7f8fc79...28.exe

windows7_x64

10

a4f7f8fc79...28.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a4f7f8fc7995f49b688114a83c5208798a085a2611330b25255ddb6a82969c28

  • Size

    372KB

  • Sample

    210517-kjqac816mj

  • MD5

    32d6092c9accf6e3ff855209f34cff3c

  • SHA1

    eb052743df8bde8b675c652a07d96718b8db7d05

  • SHA256

    a4f7f8fc7995f49b688114a83c5208798a085a2611330b25255ddb6a82969c28

  • SHA512

    97f931dedb5bba7f3ec69942b7fb3b02cb71dcd081b989adbd50901350f9d274d3ae189f508dba26e3c3aecfba43ed22cf1159ecd742a5d75fd6d002dbb9b40b

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      a4f7f8fc7995f49b688114a83c5208798a085a2611330b25255ddb6a82969c28

    • Size

      372KB

    • MD5

      32d6092c9accf6e3ff855209f34cff3c

    • SHA1

      eb052743df8bde8b675c652a07d96718b8db7d05

    • SHA256

      a4f7f8fc7995f49b688114a83c5208798a085a2611330b25255ddb6a82969c28

    • SHA512

      97f931dedb5bba7f3ec69942b7fb3b02cb71dcd081b989adbd50901350f9d274d3ae189f508dba26e3c3aecfba43ed22cf1159ecd742a5d75fd6d002dbb9b40b

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks