Overview

overview

10

Static

static

f9cda9e6e6...3a.dll

windows7_x64

10

f9cda9e6e6...3a.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f9cda9e6e65da73434958d2013530f7224c76f930992de1bfb8b99f3d7a7dc3a

  • Size

    1.4MB

  • Sample

    220524-v9g5dsbha4

  • MD5

    f7e325222e43131fdc33002feb79e72a

  • SHA1

    7567e8ac0e66df934a59bb47983ef7e5f54035af

  • SHA256

    f9cda9e6e65da73434958d2013530f7224c76f930992de1bfb8b99f3d7a7dc3a

  • SHA512

    fea1263247bab514940d75f44ae6af22d8f757c74e6893a42fbab82e7f55ca7bd9c14a0a08e5ed5748221c9b9eac2bc8647b2b4dcc924f1dfdcf26b8862757a8

Score
10/10
ramnitbankerbootkitpersistencespywarestealertrojanupxworm

Malware Config

Targets

    • Target

      f9cda9e6e65da73434958d2013530f7224c76f930992de1bfb8b99f3d7a7dc3a

    • Size

      1.4MB

    • MD5

      f7e325222e43131fdc33002feb79e72a

    • SHA1

      7567e8ac0e66df934a59bb47983ef7e5f54035af

    • SHA256

      f9cda9e6e65da73434958d2013530f7224c76f930992de1bfb8b99f3d7a7dc3a

    • SHA512

      fea1263247bab514940d75f44ae6af22d8f757c74e6893a42fbab82e7f55ca7bd9c14a0a08e5ed5748221c9b9eac2bc8647b2b4dcc924f1dfdcf26b8862757a8

    Score
    10/10
    ramnitbankerbootkitpersistencespywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks