Overview

overview

10

Static

static

af2c5e09c4...66.exe

windows7-x64

10

af2c5e09c4...66.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    af2c5e09c49fdb948901ea7a52811e44de110b03ec9d81d0100ab70c57626866

  • Size

    136KB

  • Sample

    221127-xzgf8aga31

  • MD5

    8918cfbf5cd427392711f102101f2cb0

  • SHA1

    8c27131180666b9d33648413804497e5c5f7e4f3

  • SHA256

    af2c5e09c49fdb948901ea7a52811e44de110b03ec9d81d0100ab70c57626866

  • SHA512

    42f4607cca74b350cd39413c17d795bbde602bc49e485603f86ccf04f261c7be641fdeed3d92ead6201b586154bd470fda47fd7d903f5a606c75a92fd7ac34a2

  • SSDEEP

    1536:vJvdezw+O3FEsLJErMKlZj5obLPwOZOD+UT3lDa4Op3zjkwcYZaLmO9mZm6K:vJvdezwVoMKlxa3Pw+OS3zogOmO9m8p

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      af2c5e09c49fdb948901ea7a52811e44de110b03ec9d81d0100ab70c57626866

    • Size

      136KB

    • MD5

      8918cfbf5cd427392711f102101f2cb0

    • SHA1

      8c27131180666b9d33648413804497e5c5f7e4f3

    • SHA256

      af2c5e09c49fdb948901ea7a52811e44de110b03ec9d81d0100ab70c57626866

    • SHA512

      42f4607cca74b350cd39413c17d795bbde602bc49e485603f86ccf04f261c7be641fdeed3d92ead6201b586154bd470fda47fd7d903f5a606c75a92fd7ac34a2

    • SSDEEP

      1536:vJvdezw+O3FEsLJErMKlZj5obLPwOZOD+UT3lDa4Op3zjkwcYZaLmO9mZm6K:vJvdezwVoMKlxa3Pw+OS3zogOmO9m8p

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks