Overview

overview

10

Static

static

36abaf79f3...a1.dll

windows7-x64

10

36abaf79f3...a1.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    36abaf79f3ee631e484e5d0ad2861b3a661ad0520fd1317a518aed60c59110a1

  • Size

    155KB

  • Sample

    221123-xlsbkaad4t

  • MD5

    17cc44e2e51f83bc83111cf6f9d38b4b

  • SHA1

    9c324141fe74a67e60848ddd097a1a5b67e8bdf4

  • SHA256

    36abaf79f3ee631e484e5d0ad2861b3a661ad0520fd1317a518aed60c59110a1

  • SHA512

    75017d43c72a7d42956477eee3353e4b454a883eed72bce5f71066861a325cdefe91c2a24779935300f1483d3b78ff018cd0368f16b56c4d1462cffe687ea102

  • SSDEEP

    3072:EEerWSF+6RjZiq2uW1xZfsVF4ZCeeZaXBqsWX:E7r2I721vfsVeZ+gXBqsG

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      36abaf79f3ee631e484e5d0ad2861b3a661ad0520fd1317a518aed60c59110a1

    • Size

      155KB

    • MD5

      17cc44e2e51f83bc83111cf6f9d38b4b

    • SHA1

      9c324141fe74a67e60848ddd097a1a5b67e8bdf4

    • SHA256

      36abaf79f3ee631e484e5d0ad2861b3a661ad0520fd1317a518aed60c59110a1

    • SHA512

      75017d43c72a7d42956477eee3353e4b454a883eed72bce5f71066861a325cdefe91c2a24779935300f1483d3b78ff018cd0368f16b56c4d1462cffe687ea102

    • SSDEEP

      3072:EEerWSF+6RjZiq2uW1xZfsVF4ZCeeZaXBqsWX:E7r2I721vfsVeZ+gXBqsG

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks