Overview

overview

10

Static

static

8

40ad85b4b3...b1.exe

windows7-x64

10

40ad85b4b3...b1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    40ad85b4b30d7587176128db8bf00f7870230f5d59c09c47b325836d6d34ffb1

  • Size

    111KB

  • Sample

    221030-28vgnaech3

  • MD5

    81ce0686cf314e5338fa4a05b987f7f0

  • SHA1

    c034aec61f71a4e0dad89c15180b3c12f90892e7

  • SHA256

    40ad85b4b30d7587176128db8bf00f7870230f5d59c09c47b325836d6d34ffb1

  • SHA512

    3e6450e2df0dc8e771f66b08c7bc394c7ece61a0b0915140f82b180c1b777dac46e108f900a343b7a4cfa313f148a1b3ffb8f471ad2d40fadce31fbeac0e35e7

  • SSDEEP

    1536:4+hzRsibKplyXTq8OGRnsPFG+RODTb7MXL5uXZnzEWtnP/qSIsGP06d+SVIgup4W:TROzoTq0+RO7IwnYyPymGPgp4W0Nh8n

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      40ad85b4b30d7587176128db8bf00f7870230f5d59c09c47b325836d6d34ffb1

    • Size

      111KB

    • MD5

      81ce0686cf314e5338fa4a05b987f7f0

    • SHA1

      c034aec61f71a4e0dad89c15180b3c12f90892e7

    • SHA256

      40ad85b4b30d7587176128db8bf00f7870230f5d59c09c47b325836d6d34ffb1

    • SHA512

      3e6450e2df0dc8e771f66b08c7bc394c7ece61a0b0915140f82b180c1b777dac46e108f900a343b7a4cfa313f148a1b3ffb8f471ad2d40fadce31fbeac0e35e7

    • SSDEEP

      1536:4+hzRsibKplyXTq8OGRnsPFG+RODTb7MXL5uXZnzEWtnP/qSIsGP06d+SVIgup4W:TROzoTq0+RO7IwnYyPymGPgp4W0Nh8n

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks