Overview

overview

10

Static

static

8

c21c607204...36.exe

windows7-x64

10

c21c607204...36.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c21c607204525cc9c1a35560930e469d7cecd99472dee129a01e5a74d6b66736

  • Size

    159KB

  • Sample

    221127-yb51cadb98

  • MD5

    94683da5e20402861e5a710e53d9b659

  • SHA1

    7c8bda3221ea1ef999523a13ee8e70a6b5463299

  • SHA256

    c21c607204525cc9c1a35560930e469d7cecd99472dee129a01e5a74d6b66736

  • SHA512

    87aeee56a815d0091c8f8c17b8b43c98ed0fd027a54014ed401c95df7cea4933e52a4b32c2fb7b82a9b6d5a322c9cb86bf6e74a247a65e908f1df90fd5eeaa50

  • SSDEEP

    3072:gXueThM2qu0ecibNCPabz/gVgsFZoout1NcsASSJQ4gQ0LBWt2Q:Wh7csCyEbZooSjzADJQ4g3LBWt

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      c21c607204525cc9c1a35560930e469d7cecd99472dee129a01e5a74d6b66736

    • Size

      159KB

    • MD5

      94683da5e20402861e5a710e53d9b659

    • SHA1

      7c8bda3221ea1ef999523a13ee8e70a6b5463299

    • SHA256

      c21c607204525cc9c1a35560930e469d7cecd99472dee129a01e5a74d6b66736

    • SHA512

      87aeee56a815d0091c8f8c17b8b43c98ed0fd027a54014ed401c95df7cea4933e52a4b32c2fb7b82a9b6d5a322c9cb86bf6e74a247a65e908f1df90fd5eeaa50

    • SSDEEP

      3072:gXueThM2qu0ecibNCPabz/gVgsFZoout1NcsASSJQ4gQ0LBWt2Q:Wh7csCyEbZooSjzADJQ4g3LBWt

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks