Overview

overview

10

Static

static

26041a4874...6e.exe

windows7_x64

10

26041a4874...6e.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    26041a4874359c3774899bca8616d17a772b978456f867824b29f3db27deed6e

  • Size

    195KB

  • Sample

    220616-lx9jfageg5

  • MD5

    e186bf9163d81e47298ad97e2e1a6665

  • SHA1

    9b34e5aeec8ebcb9e2d04e40dc4023c5cf326290

  • SHA256

    26041a4874359c3774899bca8616d17a772b978456f867824b29f3db27deed6e

  • SHA512

    f2d6c8966db82caf2d9b27b11935d0f46a7e847ddd11721a69dc39e4583e3776bf9b451c15e7d4fd48aa10c407d7658be794892f956cb9c0b04ed25e2df0cc6e

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      26041a4874359c3774899bca8616d17a772b978456f867824b29f3db27deed6e

    • Size

      195KB

    • MD5

      e186bf9163d81e47298ad97e2e1a6665

    • SHA1

      9b34e5aeec8ebcb9e2d04e40dc4023c5cf326290

    • SHA256

      26041a4874359c3774899bca8616d17a772b978456f867824b29f3db27deed6e

    • SHA512

      f2d6c8966db82caf2d9b27b11935d0f46a7e847ddd11721a69dc39e4583e3776bf9b451c15e7d4fd48aa10c407d7658be794892f956cb9c0b04ed25e2df0cc6e

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks