Overview

overview

10

Static

static

5

280c9f1d46...0c.exe

windows7_x64

10

280c9f1d46...0c.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    280c9f1d465c2c41adcfd7bd7741870c0820a6541b39f87545e9180502b4e20c

  • Size

    1012KB

  • Sample

    220616-cyntpaaha6

  • MD5

    469f2cccb3b3f3d3a275b854d47e7587

  • SHA1

    7ca9ee855ce370e75715be748874bad2e4628160

  • SHA256

    280c9f1d465c2c41adcfd7bd7741870c0820a6541b39f87545e9180502b4e20c

  • SHA512

    3f16750b39338f5f3b2ef63bc1c6a154aa241041f154954b1091a3c147de119449c273c3f10ea3f426e784e67a2dc3d30e81bdb0fed845de6063d135715cd354

Score
10/10
ramnitbankerevasionspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      280c9f1d465c2c41adcfd7bd7741870c0820a6541b39f87545e9180502b4e20c

    • Size

      1012KB

    • MD5

      469f2cccb3b3f3d3a275b854d47e7587

    • SHA1

      7ca9ee855ce370e75715be748874bad2e4628160

    • SHA256

      280c9f1d465c2c41adcfd7bd7741870c0820a6541b39f87545e9180502b4e20c

    • SHA512

      3f16750b39338f5f3b2ef63bc1c6a154aa241041f154954b1091a3c147de119449c273c3f10ea3f426e784e67a2dc3d30e81bdb0fed845de6063d135715cd354

    Score
    10/10
    ramnitbankerevasionspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Stops running service(s)

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Impair Defenses

1
T1562

Modify Registry

1
T1112

Credential Access

Discovery

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Service Stop

1
T1489

Tasks