Overview

overview

10

Static

static

3245305f1e...6b.exe

windows7_x64

10

3245305f1e...6b.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3245305f1e0c6a580cfcc5e613fbe9731045b53152c093ed579b4f0336f37b6b

  • Size

    204KB

  • Sample

    220122-axrg3sfba5

  • MD5

    334449566ae89a91a04910a55ce78331

  • SHA1

    4e3a77b0145eccdfceaf5a425c5b75acf8a8093d

  • SHA256

    3245305f1e0c6a580cfcc5e613fbe9731045b53152c093ed579b4f0336f37b6b

  • SHA512

    f3ba014520903b315f73ee95912b8f286a502a20968f99efb6c80df1523ddd236acc1317797f62956085e777c789d6bdcf2d4d248bffea4b7053a7eea282ce21

Score
10/10
ramnitbankerevasionpersistencespywarestealertrojanupxworm

Malware Config

Targets

    • Target

      3245305f1e0c6a580cfcc5e613fbe9731045b53152c093ed579b4f0336f37b6b

    • Size

      204KB

    • MD5

      334449566ae89a91a04910a55ce78331

    • SHA1

      4e3a77b0145eccdfceaf5a425c5b75acf8a8093d

    • SHA256

      3245305f1e0c6a580cfcc5e613fbe9731045b53152c093ed579b4f0336f37b6b

    • SHA512

      f3ba014520903b315f73ee95912b8f286a502a20968f99efb6c80df1523ddd236acc1317797f62956085e777c789d6bdcf2d4d248bffea4b7053a7eea282ce21

    Score
    10/10
    ramnitbankerpersistencespywarestealertrojanupxwormevasion

    • Modifies firewall policy service

      evasion

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks