Overview

overview

10

Static

static

2ed5edc204...57.dll

windows7-x64

10

2ed5edc204...57.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2ed5edc204952b66161fb56fc2c550e1379cf928d9ce25c2dbf8441c35968657

  • Size

    280KB

  • Sample

    221123-vqr59ahf89

  • MD5

    15465a7adcd9f13d3cdea76e4f8dd3dd

  • SHA1

    2bac90040576a56f3672dd0e33f8c2b9498e37fa

  • SHA256

    2ed5edc204952b66161fb56fc2c550e1379cf928d9ce25c2dbf8441c35968657

  • SHA512

    f9b7ad448ef23d408c3ba121cf7fc5cbfb2a524f3726d59e2294a90b5c4056bb08deefe5666f2ef942d9b5d5be0617c536838bc9ae4d29bfd0ac947227b0f7c6

  • SSDEEP

    3072:oH7++3mvlYS/kgN/AXL59g3+jO7AnX8NQ4TyX1lbY8pB4HweX9PZpo1kGJvoPEv5:oH7PKVBAtPObebj4XX9PZp4k4NbeeAG

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      2ed5edc204952b66161fb56fc2c550e1379cf928d9ce25c2dbf8441c35968657

    • Size

      280KB

    • MD5

      15465a7adcd9f13d3cdea76e4f8dd3dd

    • SHA1

      2bac90040576a56f3672dd0e33f8c2b9498e37fa

    • SHA256

      2ed5edc204952b66161fb56fc2c550e1379cf928d9ce25c2dbf8441c35968657

    • SHA512

      f9b7ad448ef23d408c3ba121cf7fc5cbfb2a524f3726d59e2294a90b5c4056bb08deefe5666f2ef942d9b5d5be0617c536838bc9ae4d29bfd0ac947227b0f7c6

    • SSDEEP

      3072:oH7++3mvlYS/kgN/AXL59g3+jO7AnX8NQ4TyX1lbY8pB4HweX9PZpo1kGJvoPEv5:oH7PKVBAtPObebj4XX9PZp4k4NbeeAG

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks