Overview

overview

10

Static

static

e4c1b57c33...aa.exe

windows7-x64

10

e4c1b57c33...aa.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e4c1b57c3354ab2243239f4fd31017748f6336bb2fb905236753fb1198a004aa

  • Size

    312KB

  • Sample

    221123-z86htahg8t

  • MD5

    bba4e99d69f09b4549cead5bb86be41f

  • SHA1

    ca554bf7aa754bcaa506007fff509723a391e09c

  • SHA256

    e4c1b57c3354ab2243239f4fd31017748f6336bb2fb905236753fb1198a004aa

  • SHA512

    ccc034983ddb421e7ac69a19f966cb41c5d197207b242510d4cb9dcbd388c2d20385fc9e491247c4f806c1b7df082aac338ed9eb8406555e795f97d13f51ef55

  • SSDEEP

    3072:It+dR1llX2xDpFuacFujhGa3/rQLAD/wWmzIBn7d4foB7nlyGIjTTqsjXj4fA+1f:PlSDpABxavrQLKLlBInRXWAopdv

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      e4c1b57c3354ab2243239f4fd31017748f6336bb2fb905236753fb1198a004aa

    • Size

      312KB

    • MD5

      bba4e99d69f09b4549cead5bb86be41f

    • SHA1

      ca554bf7aa754bcaa506007fff509723a391e09c

    • SHA256

      e4c1b57c3354ab2243239f4fd31017748f6336bb2fb905236753fb1198a004aa

    • SHA512

      ccc034983ddb421e7ac69a19f966cb41c5d197207b242510d4cb9dcbd388c2d20385fc9e491247c4f806c1b7df082aac338ed9eb8406555e795f97d13f51ef55

    • SSDEEP

      3072:It+dR1llX2xDpFuacFujhGa3/rQLAD/wWmzIBn7d4foB7nlyGIjTTqsjXj4fA+1f:PlSDpABxavrQLKLlBInRXWAopdv

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks