Overview

overview

10

Static

static

b72f4ba99c...3d.dll

windows7-x64

10

b72f4ba99c...3d.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b72f4ba99c466b38f6fbed8d6e96a08940ca8182d65e7d7f683a0505c1978e3d

  • Size

    406KB

  • Sample

    221123-ta8mmagf4s

  • MD5

    4765f88aee79dbdab8d2878954c0d5b0

  • SHA1

    a5841f011febbdcf78fa649858ed5cb2970f77c3

  • SHA256

    b72f4ba99c466b38f6fbed8d6e96a08940ca8182d65e7d7f683a0505c1978e3d

  • SHA512

    4d8eb28f58f54cd4b8a455e3a3ce5661bcfe02af77bea3229e0814787847e59c6b6d1aedb695cd7e08b9778e219f688fe93b978c1c828ed5b67e2e29b37a8a76

  • SSDEEP

    12288:CxGCOXzURlbDC9K69u2m+SqOWcsQQKiY4leDDGoggH/VREG6j4Gm01b4QZV14wM:GwXzOl

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      b72f4ba99c466b38f6fbed8d6e96a08940ca8182d65e7d7f683a0505c1978e3d

    • Size

      406KB

    • MD5

      4765f88aee79dbdab8d2878954c0d5b0

    • SHA1

      a5841f011febbdcf78fa649858ed5cb2970f77c3

    • SHA256

      b72f4ba99c466b38f6fbed8d6e96a08940ca8182d65e7d7f683a0505c1978e3d

    • SHA512

      4d8eb28f58f54cd4b8a455e3a3ce5661bcfe02af77bea3229e0814787847e59c6b6d1aedb695cd7e08b9778e219f688fe93b978c1c828ed5b67e2e29b37a8a76

    • SSDEEP

      12288:CxGCOXzURlbDC9K69u2m+SqOWcsQQKiY4leDDGoggH/VREG6j4Gm01b4QZV14wM:GwXzOl

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks