Overview

overview

10

Static

static

d141445a3f...f3.exe

windows7-x64

8

d141445a3f...f3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d141445a3fd2fcede7da0b3a0f1e6f0260283619a7987655099a2a12fe75fff3

  • Size

    212KB

  • Sample

    221121-mdwc5sef36

  • MD5

    0a17bb6e3a28372d2fa48ef37d4fd7a5

  • SHA1

    0700e8b2a18ca876ca014758ba6e71ecf0ad2727

  • SHA256

    d141445a3fd2fcede7da0b3a0f1e6f0260283619a7987655099a2a12fe75fff3

  • SHA512

    a51c64cf6906c39ad1cdf0db6ef14801fdb185df889214d5c2d349c54332e61c8a1a12a47be7779951d7014be0c7f2c9a7ad3f2783b79346014ea5966bf4fb94

  • SSDEEP

    6144:OQV2/yT4DCKHP9orgK1wAHjQjdvA3ycXt:O2LT6CKv9UgGWtVcXt

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      d141445a3fd2fcede7da0b3a0f1e6f0260283619a7987655099a2a12fe75fff3

    • Size

      212KB

    • MD5

      0a17bb6e3a28372d2fa48ef37d4fd7a5

    • SHA1

      0700e8b2a18ca876ca014758ba6e71ecf0ad2727

    • SHA256

      d141445a3fd2fcede7da0b3a0f1e6f0260283619a7987655099a2a12fe75fff3

    • SHA512

      a51c64cf6906c39ad1cdf0db6ef14801fdb185df889214d5c2d349c54332e61c8a1a12a47be7779951d7014be0c7f2c9a7ad3f2783b79346014ea5966bf4fb94

    • SSDEEP

      6144:OQV2/yT4DCKHP9orgK1wAHjQjdvA3ycXt:O2LT6CKv9UgGWtVcXt

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks