Overview

overview

10

Static

static

46e651889c...32.dll

windows7-x64

10

46e651889c...32.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46e651889c6d5a7c77db2d0f6115cbb2ef5c8ab2a271522cad1942f883a7af32

  • Size

    124KB

  • Sample

    221123-xnavasae4s

  • MD5

    5183ef6dd710170d8eb4a270cf99c120

  • SHA1

    dea360c1c63e3a67c104bb10bac928fe39e3b096

  • SHA256

    46e651889c6d5a7c77db2d0f6115cbb2ef5c8ab2a271522cad1942f883a7af32

  • SHA512

    d1cf16cbbda713caa55a3cf21e0f9418fdb981cc5367f3b7aea1825a8228fcc8d818452b76ea76dda4f98f494d95e76f362f1133ca2e66d422b806d2bd2c2b9f

  • SSDEEP

    3072:w61Ye3TaEu2CoCcn3zO7A4D8XzwaBdNxqf1V276htzozz4fH:ZTa12CoCckAe8jlBta278zW2

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      46e651889c6d5a7c77db2d0f6115cbb2ef5c8ab2a271522cad1942f883a7af32

    • Size

      124KB

    • MD5

      5183ef6dd710170d8eb4a270cf99c120

    • SHA1

      dea360c1c63e3a67c104bb10bac928fe39e3b096

    • SHA256

      46e651889c6d5a7c77db2d0f6115cbb2ef5c8ab2a271522cad1942f883a7af32

    • SHA512

      d1cf16cbbda713caa55a3cf21e0f9418fdb981cc5367f3b7aea1825a8228fcc8d818452b76ea76dda4f98f494d95e76f362f1133ca2e66d422b806d2bd2c2b9f

    • SSDEEP

      3072:w61Ye3TaEu2CoCcn3zO7A4D8XzwaBdNxqf1V276htzozz4fH:ZTa12CoCckAe8jlBta278zW2

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks