Overview

overview

10

Static

static

e2fbbe0e59...a0.exe

windows7-x64

10

e2fbbe0e59...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2fbbe0e594af10e363af9ee0356ee5051a62a96bf56d85e83a37cd380e7c9a0

  • Size

    2.8MB

  • Sample

    220716-3rg1nsgbhm

  • MD5

    9c0f64ecb81964a02ef3bca47cae0512

  • SHA1

    97251897685aef198daf28540e94d9174be86a83

  • SHA256

    e2fbbe0e594af10e363af9ee0356ee5051a62a96bf56d85e83a37cd380e7c9a0

  • SHA512

    2a4bf49866cb4f64dfb538afd753e439f2b6a9a5e04075cfd8150899be5af2425f877eb209760e18551f97df07182accda9e2b97d5186444ec5bce5bab5847b3

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      e2fbbe0e594af10e363af9ee0356ee5051a62a96bf56d85e83a37cd380e7c9a0

    • Size

      2.8MB

    • MD5

      9c0f64ecb81964a02ef3bca47cae0512

    • SHA1

      97251897685aef198daf28540e94d9174be86a83

    • SHA256

      e2fbbe0e594af10e363af9ee0356ee5051a62a96bf56d85e83a37cd380e7c9a0

    • SHA512

      2a4bf49866cb4f64dfb538afd753e439f2b6a9a5e04075cfd8150899be5af2425f877eb209760e18551f97df07182accda9e2b97d5186444ec5bce5bab5847b3

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks