Overview

overview

10

Static

static

1

1e8b296325...cb.exe

windows7_x64

10

1e8b296325...cb.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1e8b2963259086a0d5fae6b059c4ed88295bb6dc461bc27a6f1077de0c5ea7cb

  • Size

    8.5MB

  • Sample

    220612-zksbaabbf6

  • MD5

    1181e2d0d9659446012828da43c58a80

  • SHA1

    b2ca20fbb0840776fe7e48e51db7530f4bfa9ad9

  • SHA256

    1e8b2963259086a0d5fae6b059c4ed88295bb6dc461bc27a6f1077de0c5ea7cb

  • SHA512

    546206d67ae42a19e4d4f33dfa900141bcb89895cd2c67960133f125d9ddc7f257ffd8e28893f0ba750221627d28f8dd0947622b6b92cbd24f47da27371125b1

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      1e8b2963259086a0d5fae6b059c4ed88295bb6dc461bc27a6f1077de0c5ea7cb

    • Size

      8.5MB

    • MD5

      1181e2d0d9659446012828da43c58a80

    • SHA1

      b2ca20fbb0840776fe7e48e51db7530f4bfa9ad9

    • SHA256

      1e8b2963259086a0d5fae6b059c4ed88295bb6dc461bc27a6f1077de0c5ea7cb

    • SHA512

      546206d67ae42a19e4d4f33dfa900141bcb89895cd2c67960133f125d9ddc7f257ffd8e28893f0ba750221627d28f8dd0947622b6b92cbd24f47da27371125b1

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks