Overview

overview

10

Static

static

CacheMgrSr...us.exe

windows7_x64

10

CacheMgrSr...us.exe

windows10-2004_x64

10

Resubmissions

07-07-2022 08:25

220707-ka84qaahd3 10

07-07-2022 03:21

220707-dwmdhsefa4 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CacheMgrSrv.exe.virus.unpack

  • Size

    82KB

  • Sample

    220707-dwmdhsefa4

  • MD5

    44e92c4b5f440b756f8fb0c9eeb460b2

  • SHA1

    ed5bf6e6e4f2b71ba1e0f73381ee64155f9722c2

  • SHA256

    876c5cea11bbbcbe4089a3d0e8f95244cf855d3668e9bf06a97d8e20c1ff237c

  • SHA512

    378f3fa6f013437491f8c9b1c6bf0bc9641c9bc3e37f8f6c2fabc7402e8c0050d006bd84e251bd801cd37c0be9ded9277d52bc73b64f68aa14b8a6c3ff3f4566

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      CacheMgrSrv.exe.virus.unpack

    • Size

      82KB

    • MD5

      44e92c4b5f440b756f8fb0c9eeb460b2

    • SHA1

      ed5bf6e6e4f2b71ba1e0f73381ee64155f9722c2

    • SHA256

      876c5cea11bbbcbe4089a3d0e8f95244cf855d3668e9bf06a97d8e20c1ff237c

    • SHA512

      378f3fa6f013437491f8c9b1c6bf0bc9641c9bc3e37f8f6c2fabc7402e8c0050d006bd84e251bd801cd37c0be9ded9277d52bc73b64f68aa14b8a6c3ff3f4566

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks