Overview

overview

10

Static

static

f55225ecbb...3e.dll

windows7-x64

10

f55225ecbb...3e.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f55225ecbb098149df2a589caf5a37155f28c53e5a9bf856e3d89fd1a843fb3e

  • Size

    188KB

  • Sample

    221106-y7kpaachak

  • MD5

    053c85ca4e2b23c50d5b2f8a62072f50

  • SHA1

    20fb328f7032b41e6a220699bf68bcca1ca89601

  • SHA256

    f55225ecbb098149df2a589caf5a37155f28c53e5a9bf856e3d89fd1a843fb3e

  • SHA512

    c8fc6f884c7378c1e497e9c2275157fe884c2c80b65054326a09f09d38e3314d15274d95d57ae7bb4c8068cb0dfdea017387381115e3893531a119b855ba7a5b

  • SSDEEP

    3072:Hr4tCk6tp0O/IajrYDMALXb9bJ6PeS6oGgdDoB9m5rwTwdMn4F:LMZr9cPeHoGjQ5rxM4F

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      f55225ecbb098149df2a589caf5a37155f28c53e5a9bf856e3d89fd1a843fb3e

    • Size

      188KB

    • MD5

      053c85ca4e2b23c50d5b2f8a62072f50

    • SHA1

      20fb328f7032b41e6a220699bf68bcca1ca89601

    • SHA256

      f55225ecbb098149df2a589caf5a37155f28c53e5a9bf856e3d89fd1a843fb3e

    • SHA512

      c8fc6f884c7378c1e497e9c2275157fe884c2c80b65054326a09f09d38e3314d15274d95d57ae7bb4c8068cb0dfdea017387381115e3893531a119b855ba7a5b

    • SSDEEP

      3072:Hr4tCk6tp0O/IajrYDMALXb9bJ6PeS6oGgdDoB9m5rwTwdMn4F:LMZr9cPeHoGjQ5rxM4F

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks