Overview

overview

10

Static

static

ae0b8d2002...63.dll

windows7_x64

10

ae0b8d2002...63.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ae0b8d2002bbca55a482f67b85d170cf7c3c5546374929ccd43c384682975363

  • Size

    393KB

  • Sample

    220707-xnfesafhhp

  • MD5

    4485f23735f3057e24da267cc72fea88

  • SHA1

    2a626cb5d23a80187febab6a10b7d6c17677d62a

  • SHA256

    ae0b8d2002bbca55a482f67b85d170cf7c3c5546374929ccd43c384682975363

  • SHA512

    191000f7ee2b4de64c4ff075d9307b0bcd474b6cc3b50e0d6c907d1f6ebec2dbb97e25fa34c965d73e5d399115bdc1347b6a27fe9a20dddc38919693a569ded5

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      ae0b8d2002bbca55a482f67b85d170cf7c3c5546374929ccd43c384682975363

    • Size

      393KB

    • MD5

      4485f23735f3057e24da267cc72fea88

    • SHA1

      2a626cb5d23a80187febab6a10b7d6c17677d62a

    • SHA256

      ae0b8d2002bbca55a482f67b85d170cf7c3c5546374929ccd43c384682975363

    • SHA512

      191000f7ee2b4de64c4ff075d9307b0bcd474b6cc3b50e0d6c907d1f6ebec2dbb97e25fa34c965d73e5d399115bdc1347b6a27fe9a20dddc38919693a569ded5

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks