Overview

overview

10

Static

static

f3abcc2581...92.exe

windows7_x64

10

f3abcc2581...92.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f3abcc258143d2a399f92aa58531fd2c13e5d16c7fa7ea351d08108a5b35da92

  • Size

    2.2MB

  • Sample

    220625-gcpw3sacg8

  • MD5

    1dc4243c8c39d2d517e5dee12c09abf4

  • SHA1

    33d31db1e34d6f0f63abe4cbe62913b34f4517a7

  • SHA256

    f3abcc258143d2a399f92aa58531fd2c13e5d16c7fa7ea351d08108a5b35da92

  • SHA512

    bde9761291a98bb5733a64ba2b4938b20e368e8f353d1238981498e5af97e17ff81d4944d479ac1e346432da5187f861fa56be46a2f7501ccc2cc93668b18bb6

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      f3abcc258143d2a399f92aa58531fd2c13e5d16c7fa7ea351d08108a5b35da92

    • Size

      2.2MB

    • MD5

      1dc4243c8c39d2d517e5dee12c09abf4

    • SHA1

      33d31db1e34d6f0f63abe4cbe62913b34f4517a7

    • SHA256

      f3abcc258143d2a399f92aa58531fd2c13e5d16c7fa7ea351d08108a5b35da92

    • SHA512

      bde9761291a98bb5733a64ba2b4938b20e368e8f353d1238981498e5af97e17ff81d4944d479ac1e346432da5187f861fa56be46a2f7501ccc2cc93668b18bb6

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks