Overview

overview

10

Static

static

b72a57e134...67.exe

windows7-x64

10

b72a57e134...67.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b72a57e13408d773508fa76a9e3ef93c22c3ba98e2adf84a887252d2163dea67

  • Size

    228KB

  • Sample

    221106-zjqq3abbc3

  • MD5

    0cb8f5da95c85956e1548afd66540a6e

  • SHA1

    415d0123ca5c38b8054b38b70b64e602dffbd38f

  • SHA256

    b72a57e13408d773508fa76a9e3ef93c22c3ba98e2adf84a887252d2163dea67

  • SHA512

    03d3cf2f620a69dc4052d73fcb1ceaba81603e6efdbf95c5c8010799227e4e31f376fb7975d66caae7b31ecc9ce8c07acfb0bc1ee0b1a55c892d6270c901b86f

  • SSDEEP

    6144:WvLxX4QJp3F8fEBrG/bp12MB/plQb3g8akRCEaj:WtXJtmgECMB/pGbgbn

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      b72a57e13408d773508fa76a9e3ef93c22c3ba98e2adf84a887252d2163dea67

    • Size

      228KB

    • MD5

      0cb8f5da95c85956e1548afd66540a6e

    • SHA1

      415d0123ca5c38b8054b38b70b64e602dffbd38f

    • SHA256

      b72a57e13408d773508fa76a9e3ef93c22c3ba98e2adf84a887252d2163dea67

    • SHA512

      03d3cf2f620a69dc4052d73fcb1ceaba81603e6efdbf95c5c8010799227e4e31f376fb7975d66caae7b31ecc9ce8c07acfb0bc1ee0b1a55c892d6270c901b86f

    • SSDEEP

      6144:WvLxX4QJp3F8fEBrG/bp12MB/plQb3g8akRCEaj:WtXJtmgECMB/pGbgbn

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks