Overview

overview

10

Static

static

e1b02016b2...7d.exe

windows7_x64

10

e1b02016b2...7d.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1b02016b2cc99dd8de1f8bf93ec7ed7f8630b77d483888be2bf28df9027967d

  • Size

    1.9MB

  • Sample

    220708-vn3tzabdeq

  • MD5

    bc89ccd9f7b8c62579d6f66b8d19e0a6

  • SHA1

    fb96cf32c3707f7b01816f2f646a90749f976496

  • SHA256

    e1b02016b2cc99dd8de1f8bf93ec7ed7f8630b77d483888be2bf28df9027967d

  • SHA512

    4a84f32430fc3779a2c5e03982087a7da386a4021212816a85dd261e42796152441323074a3153b20b8fc4a98a8c6788c45d47cd43156fe1f970ad18fc8921f6

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      e1b02016b2cc99dd8de1f8bf93ec7ed7f8630b77d483888be2bf28df9027967d

    • Size

      1.9MB

    • MD5

      bc89ccd9f7b8c62579d6f66b8d19e0a6

    • SHA1

      fb96cf32c3707f7b01816f2f646a90749f976496

    • SHA256

      e1b02016b2cc99dd8de1f8bf93ec7ed7f8630b77d483888be2bf28df9027967d

    • SHA512

      4a84f32430fc3779a2c5e03982087a7da386a4021212816a85dd261e42796152441323074a3153b20b8fc4a98a8c6788c45d47cd43156fe1f970ad18fc8921f6

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks