Overview

overview

10

Static

static

c2e5aeb33d...0d.exe

windows7_x64

10

c2e5aeb33d...0d.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c2e5aeb33d6a4d197dd1bf3381463c1c2b43826c0ad14200edf4b98f8f6bc40d

  • Size

    756KB

  • Sample

    220625-bvldqabcd2

  • MD5

    abe779482d3e8d51381ca04cd84d2cd4

  • SHA1

    2751f1b89bdb639e0e00e44b8ebc6b7ff3744817

  • SHA256

    c2e5aeb33d6a4d197dd1bf3381463c1c2b43826c0ad14200edf4b98f8f6bc40d

  • SHA512

    fa8eea2f63d37db30b35bc8a5a731b0120c5b4e676dd8ccd02f3b3c3b729d6fe396950c736b5fe75c735e46fd4c3191db73181917c14a7d24b8ad1d44e39a4a0

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      c2e5aeb33d6a4d197dd1bf3381463c1c2b43826c0ad14200edf4b98f8f6bc40d

    • Size

      756KB

    • MD5

      abe779482d3e8d51381ca04cd84d2cd4

    • SHA1

      2751f1b89bdb639e0e00e44b8ebc6b7ff3744817

    • SHA256

      c2e5aeb33d6a4d197dd1bf3381463c1c2b43826c0ad14200edf4b98f8f6bc40d

    • SHA512

      fa8eea2f63d37db30b35bc8a5a731b0120c5b4e676dd8ccd02f3b3c3b729d6fe396950c736b5fe75c735e46fd4c3191db73181917c14a7d24b8ad1d44e39a4a0

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks