Overview

overview

10

Static

static

cdd67ece96...a2.exe

windows7-x64

10

cdd67ece96...a2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cdd67ece96eded781208efbccee43d37dd9cfd712011c2d6ddeafb1534736da2

  • Size

    156KB

  • Sample

    221127-x4lxhagd6t

  • MD5

    bb5ff38b691d1d15589618a0cec43488

  • SHA1

    0055be3972aef12a3dc9de79900379d76ed06fab

  • SHA256

    cdd67ece96eded781208efbccee43d37dd9cfd712011c2d6ddeafb1534736da2

  • SHA512

    fbd5c3e1a0f19179ef43334f48ad73b9277f04e972b2fa6244d8d130aee0e20638601a54bef94b395c40e22c3e006a347b09ea5acab6ce7bd8e7e4aed2cdbe4c

  • SSDEEP

    3072:d7aR+ujGXMCmN6/kJoan3o4FFezbi2ORrIb9x4JiQBTNP+v1ONCqeKlc:GZjkW6/kJdAbGRrG9CNP+v1ON08

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      cdd67ece96eded781208efbccee43d37dd9cfd712011c2d6ddeafb1534736da2

    • Size

      156KB

    • MD5

      bb5ff38b691d1d15589618a0cec43488

    • SHA1

      0055be3972aef12a3dc9de79900379d76ed06fab

    • SHA256

      cdd67ece96eded781208efbccee43d37dd9cfd712011c2d6ddeafb1534736da2

    • SHA512

      fbd5c3e1a0f19179ef43334f48ad73b9277f04e972b2fa6244d8d130aee0e20638601a54bef94b395c40e22c3e006a347b09ea5acab6ce7bd8e7e4aed2cdbe4c

    • SSDEEP

      3072:d7aR+ujGXMCmN6/kJoan3o4FFezbi2ORrIb9x4JiQBTNP+v1ONCqeKlc:GZjkW6/kJdAbGRrG9CNP+v1ON08

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks