Overview

overview

10

Static

static

2c6adddd41...ca.dll

windows7_x64

10

2c6adddd41...ca.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c6adddd41b7a65affa11ccfe920ca871d5c62dd1894c54030c62c4405239bca

  • Size

    1.1MB

  • Sample

    220211-ezn7yscdcj

  • MD5

    4633bfb75dd5432e9406603241cb9b05

  • SHA1

    a8418390c0d2f03bf3e895f6a5e5811f7795318e

  • SHA256

    2c6adddd41b7a65affa11ccfe920ca871d5c62dd1894c54030c62c4405239bca

  • SHA512

    22cff98cfeb8d159d3547c2adce9fad5d9aad59a67e412414a71087c55dd11bfa5959d428f38aaba8a111be98f33f54b73525b6cc5ad02db442f98efd09e3fe0

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      2c6adddd41b7a65affa11ccfe920ca871d5c62dd1894c54030c62c4405239bca

    • Size

      1.1MB

    • MD5

      4633bfb75dd5432e9406603241cb9b05

    • SHA1

      a8418390c0d2f03bf3e895f6a5e5811f7795318e

    • SHA256

      2c6adddd41b7a65affa11ccfe920ca871d5c62dd1894c54030c62c4405239bca

    • SHA512

      22cff98cfeb8d159d3547c2adce9fad5d9aad59a67e412414a71087c55dd11bfa5959d428f38aaba8a111be98f33f54b73525b6cc5ad02db442f98efd09e3fe0

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks