Overview

overview

10

Static

static

70b08e5ff9...8b.dll

windows7_x64

10

70b08e5ff9...8b.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70b08e5ff99b9f5240a5e2b8762123a7e73a0031a1825a2a7ea9635fcf26ee8b

  • Size

    5.2MB

  • Sample

    220129-he57hsfbe5

  • MD5

    e1529937aeddca0f75da01d0751fdc22

  • SHA1

    7992b5ece53b8a4308922c5ce645963ef0c95dc4

  • SHA256

    70b08e5ff99b9f5240a5e2b8762123a7e73a0031a1825a2a7ea9635fcf26ee8b

  • SHA512

    104ed38861ebd88bf4a472e8ddd5d48be46794d39b31b52aa96f30d05f3893d439a0addc486f73d5f9649e79fb1990467a90b574149a279df5f6599c75e03990

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      70b08e5ff99b9f5240a5e2b8762123a7e73a0031a1825a2a7ea9635fcf26ee8b

    • Size

      5.2MB

    • MD5

      e1529937aeddca0f75da01d0751fdc22

    • SHA1

      7992b5ece53b8a4308922c5ce645963ef0c95dc4

    • SHA256

      70b08e5ff99b9f5240a5e2b8762123a7e73a0031a1825a2a7ea9635fcf26ee8b

    • SHA512

      104ed38861ebd88bf4a472e8ddd5d48be46794d39b31b52aa96f30d05f3893d439a0addc486f73d5f9649e79fb1990467a90b574149a279df5f6599c75e03990

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks