Overview

overview

10

Static

static

1

2e1241e9ef...cf.exe

windows7_x64

10

2e1241e9ef...cf.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e1241e9ef1417a857892aaa1705cf89f5759bcf8f7b33e61cd19ca33fc7c4cf

  • Size

    6.2MB

  • Sample

    220622-pgfg7sebcq

  • MD5

    0fe34c125e732e7410d5135ee5c35d18

  • SHA1

    4b5e14fafd6b427ab565f3060bf22c075b564ff7

  • SHA256

    2e1241e9ef1417a857892aaa1705cf89f5759bcf8f7b33e61cd19ca33fc7c4cf

  • SHA512

    f25e0f92d84fe7682e1547eeae8d0781015732752fc4c6706e9a9687efc21d68916fbd638f7b87538b5931dd935f143ca8638b488ddc0a0d544d66ece1fff272

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      2e1241e9ef1417a857892aaa1705cf89f5759bcf8f7b33e61cd19ca33fc7c4cf

    • Size

      6.2MB

    • MD5

      0fe34c125e732e7410d5135ee5c35d18

    • SHA1

      4b5e14fafd6b427ab565f3060bf22c075b564ff7

    • SHA256

      2e1241e9ef1417a857892aaa1705cf89f5759bcf8f7b33e61cd19ca33fc7c4cf

    • SHA512

      f25e0f92d84fe7682e1547eeae8d0781015732752fc4c6706e9a9687efc21d68916fbd638f7b87538b5931dd935f143ca8638b488ddc0a0d544d66ece1fff272

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks