Overview

overview

10

Static

static

tcpip.exe

windows7_x64

10

tcpip.exe

windows10-2004_x64

10

Resubmissions

16-06-2022 11:45

220616-nwzzqahca6 10

16-06-2022 02:20

220616-cswmcafehr 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1.zip

  • Size

    1.2MB

  • Sample

    220616-nwzzqahca6

  • MD5

    3c56a7bf04bad7f85cf469e35c305358

  • SHA1

    21b4fa76aa403646f0dd79c70322299d695787ae

  • SHA256

    c641a8d24354b0ed3cf3d21c21e8c6f58d969a667985f829edebbadcf84f32ec

  • SHA512

    f03940882e949e19736de4652514fcf61c9865556e7a7f9bbbdf620db39c531fb2c2e6a92f6445a816e356c4dbaec3394f1e584420d25f4c9f6bda3acbc6c2a2

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      tcpip.exe

    • Size

      132KB

    • MD5

      1d0dd320d806faba3ef111d7866dcc95

    • SHA1

      c2346a33783b38fffc3f3aca0c4eba9b315570f7

    • SHA256

      9455b76b37e7a2a7f7ef3ec76f69acd40511b0ddde3af3cf746311a5e2498b15

    • SHA512

      da50030b30cce8f0b3dae0ac4cb105d91d1f3b466780d9fe466479441d9945280d9bec2fee52ede6cdeb802be460072fc63dbe645eb0cc1739d35a8e3f923b17

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks