Overview

overview

10

Static

static

1

47b13019ad...d5.exe

windows7_x64

10

47b13019ad...d5.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    47b13019ad68c21411b5a18a29f39ef821c71ea1158dc6ed1a11f58e9dd18ad5

  • Size

    3.4MB

  • Sample

    220714-gj3fragfbm

  • MD5

    c31d89828dd33b14e2c0c97075af2ed9

  • SHA1

    1908bd082d0399dca6a21f3ce1779670a6b93726

  • SHA256

    47b13019ad68c21411b5a18a29f39ef821c71ea1158dc6ed1a11f58e9dd18ad5

  • SHA512

    be054a06528acf4219bec7036c7a26be15db8edc0ae4e41ac618d8f2cd4691db36c88563b1fe0d2bf9c8030cbdbbc8d912ffe305cbb5426dc96739defaf77c4a

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      47b13019ad68c21411b5a18a29f39ef821c71ea1158dc6ed1a11f58e9dd18ad5

    • Size

      3.4MB

    • MD5

      c31d89828dd33b14e2c0c97075af2ed9

    • SHA1

      1908bd082d0399dca6a21f3ce1779670a6b93726

    • SHA256

      47b13019ad68c21411b5a18a29f39ef821c71ea1158dc6ed1a11f58e9dd18ad5

    • SHA512

      be054a06528acf4219bec7036c7a26be15db8edc0ae4e41ac618d8f2cd4691db36c88563b1fe0d2bf9c8030cbdbbc8d912ffe305cbb5426dc96739defaf77c4a

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks