Overview

overview

10

Static

static

53106e3240...4f.exe

windows7-x64

10

53106e3240...4f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    53106e3240af56ae154c54cffad580d13362cbf14527bfc48bbcc3b5d89c6e4f

  • Size

    828KB

  • Sample

    220717-bdyygsaefk

  • MD5

    72ea2786e89cafb34a42c2ba5b1bfe53

  • SHA1

    eae469a2799ff4b0ee86d4656023a869b784af9e

  • SHA256

    53106e3240af56ae154c54cffad580d13362cbf14527bfc48bbcc3b5d89c6e4f

  • SHA512

    9edd2be2d0e61e5829eb4288b99c51548fc0cfb32ee508f26e13427049c9ec081ef6b6222787a0250bf7e9bc4db69b44c4237a1cca47f01664b0fdefcf570345

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      53106e3240af56ae154c54cffad580d13362cbf14527bfc48bbcc3b5d89c6e4f

    • Size

      828KB

    • MD5

      72ea2786e89cafb34a42c2ba5b1bfe53

    • SHA1

      eae469a2799ff4b0ee86d4656023a869b784af9e

    • SHA256

      53106e3240af56ae154c54cffad580d13362cbf14527bfc48bbcc3b5d89c6e4f

    • SHA512

      9edd2be2d0e61e5829eb4288b99c51548fc0cfb32ee508f26e13427049c9ec081ef6b6222787a0250bf7e9bc4db69b44c4237a1cca47f01664b0fdefcf570345

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks