Overview

overview

10

Static

static

%E5%88%9B%...B6.exe

windows7_x64

10

%E5%88%9B%...B6.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    %E5%88%9B%E8%BE%89%E4%BC%81%E4%B8%9A%E5%90%8D%E5%BD%95%E4%BF%A1%E6%81%AF%E6%90%9C%E7%B4%A2%E8%BD%AF%E4%BB%B6.exe

  • Size

    968KB

  • Sample

    220519-b8r4esbfhq

  • MD5

    b002b1aef58889242163dba60b7d6a47

  • SHA1

    360b5a679662061f20778d12a668ceb204179f00

  • SHA256

    4e707c27c365409032b8081092276d83498149589fa42c52271febbc5682bc81

  • SHA512

    ccdf7add0ccc3a9c9b8a98683a04deaa1fa5197a4002276f92bc303042a1c824cbd80706d5522d676fc907f7625673d2d8ae3a4c945be3fb62bdf92dfa185ec7

Score
10/10
ramnitbankerbootkitpersistencespywarestealertrojanupxworm

Malware Config

Targets

    • Target

      %E5%88%9B%E8%BE%89%E4%BC%81%E4%B8%9A%E5%90%8D%E5%BD%95%E4%BF%A1%E6%81%AF%E6%90%9C%E7%B4%A2%E8%BD%AF%E4%BB%B6.exe

    • Size

      968KB

    • MD5

      b002b1aef58889242163dba60b7d6a47

    • SHA1

      360b5a679662061f20778d12a668ceb204179f00

    • SHA256

      4e707c27c365409032b8081092276d83498149589fa42c52271febbc5682bc81

    • SHA512

      ccdf7add0ccc3a9c9b8a98683a04deaa1fa5197a4002276f92bc303042a1c824cbd80706d5522d676fc907f7625673d2d8ae3a4c945be3fb62bdf92dfa185ec7

    Score
    10/10
    ramnitbankerspywarestealertrojanupxwormbootkitpersistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks