Overview

overview

10

Static

static

36abec58c8...8a.exe

windows7_x64

10

36abec58c8...8a.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    36abec58c85b12fd59130fe4e7e9accdc5ba61820528a8bae9f3a3d8dcb9bb8a

  • Size

    1016KB

  • Sample

    220626-b8ehbscdfn

  • MD5

    8d67e898e564bf0bf8e1ee82035e53a5

  • SHA1

    074eab2cc3024e927b9be29da1f917e6ef81b5ad

  • SHA256

    36abec58c85b12fd59130fe4e7e9accdc5ba61820528a8bae9f3a3d8dcb9bb8a

  • SHA512

    6520d76a57826ec31f44f0ca0fcd2c76c0d8690c509988d4084e18409dc1f075deeee2d54cf55226b883eebd1c510ef692c03f6a1ef06248c2bc3e4d1058ba22

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      36abec58c85b12fd59130fe4e7e9accdc5ba61820528a8bae9f3a3d8dcb9bb8a

    • Size

      1016KB

    • MD5

      8d67e898e564bf0bf8e1ee82035e53a5

    • SHA1

      074eab2cc3024e927b9be29da1f917e6ef81b5ad

    • SHA256

      36abec58c85b12fd59130fe4e7e9accdc5ba61820528a8bae9f3a3d8dcb9bb8a

    • SHA512

      6520d76a57826ec31f44f0ca0fcd2c76c0d8690c509988d4084e18409dc1f075deeee2d54cf55226b883eebd1c510ef692c03f6a1ef06248c2bc3e4d1058ba22

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks