Overview

overview

10

Static

static

1

41c1250b4e...ff.exe

windows7_x64

10

41c1250b4e...ff.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    41c1250b4e52f149115b96047a73d1670179bffa17e7b14e652c3e84e98ce8ff

  • Size

    9.6MB

  • Sample

    220708-fchmbsbhh6

  • MD5

    af93d028f04bcce7e9f526444767b107

  • SHA1

    72221de56e3ed4db19719bec68bc4596857c9fd9

  • SHA256

    41c1250b4e52f149115b96047a73d1670179bffa17e7b14e652c3e84e98ce8ff

  • SHA512

    813bde2a83311dc16bc29b8e722129bfed818465349fb4cfd281f74b0f3120dfaa57db467808aab05f8ad935f35160dde4a79cb48d4ef1a550ed6c9c25665653

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      41c1250b4e52f149115b96047a73d1670179bffa17e7b14e652c3e84e98ce8ff

    • Size

      9.6MB

    • MD5

      af93d028f04bcce7e9f526444767b107

    • SHA1

      72221de56e3ed4db19719bec68bc4596857c9fd9

    • SHA256

      41c1250b4e52f149115b96047a73d1670179bffa17e7b14e652c3e84e98ce8ff

    • SHA512

      813bde2a83311dc16bc29b8e722129bfed818465349fb4cfd281f74b0f3120dfaa57db467808aab05f8ad935f35160dde4a79cb48d4ef1a550ed6c9c25665653

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks