Overview

overview

10

Static

static

8

44cf6c0e70...48.exe

windows7_x64

10

44cf6c0e70...48.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44cf6c0e705460671ec415e347ac426accb395f4fee37d2da632b456bc02ef48

  • Size

    121KB

  • Sample

    220707-wp7pzsebem

  • MD5

    705252b107bda136589d0f0aa16b0411

  • SHA1

    e0357c3b13f393990367ecad3562ca1f48770ae7

  • SHA256

    44cf6c0e705460671ec415e347ac426accb395f4fee37d2da632b456bc02ef48

  • SHA512

    cb0c5f45ab02c1e1e5604b70e31c89c5ac655bcc9a0cd31fd7646d3946e28f02b05b7b6b540c963fcfa2ec951315eb3f0ce9a078dbfd8bed6c52d879274aec5a

Score
10/10
ramnitbankerevasionspywarestealersuricatatrojanupxworm

Malware Config

Targets

    • Target

      44cf6c0e705460671ec415e347ac426accb395f4fee37d2da632b456bc02ef48

    • Size

      121KB

    • MD5

      705252b107bda136589d0f0aa16b0411

    • SHA1

      e0357c3b13f393990367ecad3562ca1f48770ae7

    • SHA256

      44cf6c0e705460671ec415e347ac426accb395f4fee37d2da632b456bc02ef48

    • SHA512

      cb0c5f45ab02c1e1e5604b70e31c89c5ac655bcc9a0cd31fd7646d3946e28f02b05b7b6b540c963fcfa2ec951315eb3f0ce9a078dbfd8bed6c52d879274aec5a

    Score
    10/10
    ramnitbankerspywarestealertrojanupxwormevasionsuricata

    • Modifies firewall policy service

      evasion

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • suricata: ET MALWARE Known Hostile Domain ant.trenz .pl Lookup

      suricata: ET MALWARE Known Hostile Domain ant.trenz .pl Lookup

      suricata

    • suricata: ET MALWARE Known Hostile Domain ilo.brenz .pl Lookup

      suricata: ET MALWARE Known Hostile Domain ilo.brenz .pl Lookup

      suricata

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks