Overview

overview

10

Static

static

7535b5e21a...09.dll

windows7_x64

10

7535b5e21a...09.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7535b5e21a73e27910f621b959b4f2f788278c17ca0bcf097a601527e59ada09

  • Size

    151KB

  • Sample

    220612-q1rj9aaac8

  • MD5

    5d4a4abc9e75b1982bd9d0826436e7b7

  • SHA1

    7ecd11a34f83638b982fd16231da47108c6dffb6

  • SHA256

    7535b5e21a73e27910f621b959b4f2f788278c17ca0bcf097a601527e59ada09

  • SHA512

    ce9db340d8c4fe08e0bad5a3a7c0330e695e99ec242d68f6a87a8aac76972201ac6e5723f253c6755288474a64ce906f0c727ccdce063dc718489cb6f45dae9f

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      7535b5e21a73e27910f621b959b4f2f788278c17ca0bcf097a601527e59ada09

    • Size

      151KB

    • MD5

      5d4a4abc9e75b1982bd9d0826436e7b7

    • SHA1

      7ecd11a34f83638b982fd16231da47108c6dffb6

    • SHA256

      7535b5e21a73e27910f621b959b4f2f788278c17ca0bcf097a601527e59ada09

    • SHA512

      ce9db340d8c4fe08e0bad5a3a7c0330e695e99ec242d68f6a87a8aac76972201ac6e5723f253c6755288474a64ce906f0c727ccdce063dc718489cb6f45dae9f

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks