Overview

overview

10

Static

static

139b5e2737...ab.dll

windows7_x64

10

139b5e2737...ab.dll

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    139b5e2737385a0f4f4758b115b276da11abc4ceeddb747974c5c711e48949ab

  • Size

    175KB

  • Sample

    220630-xwm5lahdcp

  • MD5

    6da623293e4972585d1395adc5dc4b0d

  • SHA1

    de4e53f8bef0577e0d9b074bb85818e98dce4792

  • SHA256

    139b5e2737385a0f4f4758b115b276da11abc4ceeddb747974c5c711e48949ab

  • SHA512

    f984134fe6a4a205d454f529deeefd5c80283cd43c283188660cb115988c41ca62e29b4e9a1be1aee63e80675006c95d78a85a1a727415f56e3979514a8ca7b4

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      139b5e2737385a0f4f4758b115b276da11abc4ceeddb747974c5c711e48949ab

    • Size

      175KB

    • MD5

      6da623293e4972585d1395adc5dc4b0d

    • SHA1

      de4e53f8bef0577e0d9b074bb85818e98dce4792

    • SHA256

      139b5e2737385a0f4f4758b115b276da11abc4ceeddb747974c5c711e48949ab

    • SHA512

      f984134fe6a4a205d454f529deeefd5c80283cd43c283188660cb115988c41ca62e29b4e9a1be1aee63e80675006c95d78a85a1a727415f56e3979514a8ca7b4

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks