Overview

overview

10

Static

static

9e8fbc3f56...7f.exe

windows7-x64

10

9e8fbc3f56...7f.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    9e8fbc3f569c703857e52359ecd7d5cb0a50274b7d3f9568b07525c2ca470a7f

  • Size

    292KB

  • Sample

    221106-znwg4sbda6

  • MD5

    0e95b7e4925b92678355e57ff72fd0f0

  • SHA1

    c3b8acb3d8fe27f6cccfc12465b2683a1ca4e8b5

  • SHA256

    9e8fbc3f569c703857e52359ecd7d5cb0a50274b7d3f9568b07525c2ca470a7f

  • SHA512

    a94c03179678371f75b1dd55560c2e45f4fcad4216abd354bb708aafbf0865f64309349722aef6bfc96dd2001691dc58acf3d127c7e109ee0c888a43f2b0da73

  • SSDEEP

    6144:NvNNtWuYcqHmiNLOcQFfdD4motiK33l/f/:NvNb/1oLfQ9ehRl/f/

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      9e8fbc3f569c703857e52359ecd7d5cb0a50274b7d3f9568b07525c2ca470a7f

    • Size

      292KB

    • MD5

      0e95b7e4925b92678355e57ff72fd0f0

    • SHA1

      c3b8acb3d8fe27f6cccfc12465b2683a1ca4e8b5

    • SHA256

      9e8fbc3f569c703857e52359ecd7d5cb0a50274b7d3f9568b07525c2ca470a7f

    • SHA512

      a94c03179678371f75b1dd55560c2e45f4fcad4216abd354bb708aafbf0865f64309349722aef6bfc96dd2001691dc58acf3d127c7e109ee0c888a43f2b0da73

    • SSDEEP

      6144:NvNNtWuYcqHmiNLOcQFfdD4motiK33l/f/:NvNb/1oLfQ9ehRl/f/

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks