General

  • Target

    6aaa9d0ab99aa6bf1c4f61b8e498f5bfce77f99032ccb8977dd915cf5216b2a8

  • Size

    404KB

  • Sample

    221127-xrgr1sfd2w

  • MD5

    e2a2c6b73471c5b714f40b4f7d1417c2

  • SHA1

    e8350803a4b2ef081d43a902efe3809e376c05e8

  • SHA256

    6aaa9d0ab99aa6bf1c4f61b8e498f5bfce77f99032ccb8977dd915cf5216b2a8

  • SHA512

    9319637c085f75d14171389e9be5b4772948317fbb8d5950074acdc1b5f71f5d57937135b083f77cb3932995557a3e447c24ec4ec777408cf680f69b63eb8810

  • SSDEEP

    6144:g/j88vnxEXc6YUWhv7SrJwsuzrMh/8gO1n4aHrmtc2cAG68PS2f:g/j88ZEXdWhjQ0rq/9vaHrmtcfd6CSQ

Malware Config

Targets

    • Target

      6aaa9d0ab99aa6bf1c4f61b8e498f5bfce77f99032ccb8977dd915cf5216b2a8

    • Size

      404KB

    • MD5

      e2a2c6b73471c5b714f40b4f7d1417c2

    • SHA1

      e8350803a4b2ef081d43a902efe3809e376c05e8

    • SHA256

      6aaa9d0ab99aa6bf1c4f61b8e498f5bfce77f99032ccb8977dd915cf5216b2a8

    • SHA512

      9319637c085f75d14171389e9be5b4772948317fbb8d5950074acdc1b5f71f5d57937135b083f77cb3932995557a3e447c24ec4ec777408cf680f69b63eb8810

    • SSDEEP

      6144:g/j88vnxEXc6YUWhv7SrJwsuzrMh/8gO1n4aHrmtc2cAG68PS2f:g/j88ZEXdWhjQ0rq/9vaHrmtcfd6CSQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Tasks