Overview

overview

10

Static

static

8

879e4e95ad...72.exe

windows7-x64

10

879e4e95ad...72.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    879e4e95ad4d7318460315dca337317fdd02aa26c7da7b68a54f8c47e2c00672

  • Size

    128KB

  • Sample

    221127-x2wzpacd69

  • MD5

    d4210ab9f980687e4a980a229648e866

  • SHA1

    0930364a737faaf367d0553d959d23be907629b5

  • SHA256

    879e4e95ad4d7318460315dca337317fdd02aa26c7da7b68a54f8c47e2c00672

  • SHA512

    3f63edd98c36c75c1cf54965573ccb19ae4f38d556bb7b94f64654f0db0d839e66cb47f22c7dcf991b34014e1666e08800a79bcc6d9913bd419ca565db0d5cb6

  • SSDEEP

    3072:/Is9QBv2HWBImgyKN/4FAVJlz0rplJz0F8HPS:/I1GSgjN/4F+zypfgOS

Score
10/10
ramnitbankerevasionspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      879e4e95ad4d7318460315dca337317fdd02aa26c7da7b68a54f8c47e2c00672

    • Size

      128KB

    • MD5

      d4210ab9f980687e4a980a229648e866

    • SHA1

      0930364a737faaf367d0553d959d23be907629b5

    • SHA256

      879e4e95ad4d7318460315dca337317fdd02aa26c7da7b68a54f8c47e2c00672

    • SHA512

      3f63edd98c36c75c1cf54965573ccb19ae4f38d556bb7b94f64654f0db0d839e66cb47f22c7dcf991b34014e1666e08800a79bcc6d9913bd419ca565db0d5cb6

    • SSDEEP

      3072:/Is9QBv2HWBImgyKN/4FAVJlz0rplJz0F8HPS:/I1GSgjN/4F+zypfgOS

    Score
    10/10
    ramnitbankerspywarestealertrojanupxwormevasion

    • Modifies firewall policy service

      evasion

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks