Overview

overview

10

Static

static

3ac1dff6e8...3.html

windows7_x64

10

3ac1dff6e8...3.html

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ac1dff6e81dcf6c6e3d3ed14b9f8d8ac62c0ee08479db37053280e9173c8293

  • Size

    132KB

  • Sample

    220706-ag7t5agee4

  • MD5

    e2b6e235c30824931e495c47246a2b96

  • SHA1

    54c04eb39d886f85f83036a7cdc4df00c5c90783

  • SHA256

    3ac1dff6e81dcf6c6e3d3ed14b9f8d8ac62c0ee08479db37053280e9173c8293

  • SHA512

    91d9693580d17c65be9832dfd60f08420b0952023d06d202db235f68d3b17a765b408e94884ada627666478ede2e9df41c2cd2f537070d795987c00792b2410c

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      3ac1dff6e81dcf6c6e3d3ed14b9f8d8ac62c0ee08479db37053280e9173c8293

    • Size

      132KB

    • MD5

      e2b6e235c30824931e495c47246a2b96

    • SHA1

      54c04eb39d886f85f83036a7cdc4df00c5c90783

    • SHA256

      3ac1dff6e81dcf6c6e3d3ed14b9f8d8ac62c0ee08479db37053280e9173c8293

    • SHA512

      91d9693580d17c65be9832dfd60f08420b0952023d06d202db235f68d3b17a765b408e94884ada627666478ede2e9df41c2cd2f537070d795987c00792b2410c

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks