Overview

overview

10

Static

static

433f7c13d8...01.exe

windows7_x64

10

433f7c13d8...01.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    433f7c13d86115e1437ed42dce4bf44a1d4c6f2edf7b3245fab2b749e78daf01

  • Size

    656KB

  • Sample

    220306-yzrgvseeh8

  • MD5

    b155477a13c1106c26ad16839fcaf351

  • SHA1

    97a96e199037e0c6a925697df057fab5b94a8e6f

  • SHA256

    433f7c13d86115e1437ed42dce4bf44a1d4c6f2edf7b3245fab2b749e78daf01

  • SHA512

    0a916db3651b58a9c5c0f5ece38295eecad12007f98ea4132b12facd938b2759ee368448e9b8766b336b6185a308cb9c240ca224605f97e480b596132bb7437c

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      433f7c13d86115e1437ed42dce4bf44a1d4c6f2edf7b3245fab2b749e78daf01

    • Size

      656KB

    • MD5

      b155477a13c1106c26ad16839fcaf351

    • SHA1

      97a96e199037e0c6a925697df057fab5b94a8e6f

    • SHA256

      433f7c13d86115e1437ed42dce4bf44a1d4c6f2edf7b3245fab2b749e78daf01

    • SHA512

      0a916db3651b58a9c5c0f5ece38295eecad12007f98ea4132b12facd938b2759ee368448e9b8766b336b6185a308cb9c240ca224605f97e480b596132bb7437c

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks