General

  • Target

    e325497a292574cd2046c81d5ec8d403fff14c8315aba4aed9d78dace4b5db9c

  • Size

    718KB

  • Sample

    221127-ybtmbadb85

  • MD5

    c836222c7829dc373633e0abca003e16

  • SHA1

    55629476a73095c0643200480a36cfeeea463328

  • SHA256

    e325497a292574cd2046c81d5ec8d403fff14c8315aba4aed9d78dace4b5db9c

  • SHA512

    2fd68c649547cc5b94f948ec91f49ff2fa82f0bbc7d152a9fc0eb13fbd35e934024e69b12f534a8f3c2b0bb52e428618f7c5979450f60fed3a7ba4e75afb587e

  • SSDEEP

    12288:Ezb9rMfc+CKUQyUmjtc4euuzPrs9pGp8hunWoopooK9kwPZSPYC:Ezb1MlCKUQyUmjtczu6Prs9pgWoopooJ

Malware Config

Targets

    • Target

      e325497a292574cd2046c81d5ec8d403fff14c8315aba4aed9d78dace4b5db9c

    • Size

      718KB

    • MD5

      c836222c7829dc373633e0abca003e16

    • SHA1

      55629476a73095c0643200480a36cfeeea463328

    • SHA256

      e325497a292574cd2046c81d5ec8d403fff14c8315aba4aed9d78dace4b5db9c

    • SHA512

      2fd68c649547cc5b94f948ec91f49ff2fa82f0bbc7d152a9fc0eb13fbd35e934024e69b12f534a8f3c2b0bb52e428618f7c5979450f60fed3a7ba4e75afb587e

    • SSDEEP

      12288:Ezb9rMfc+CKUQyUmjtc4euuzPrs9pGp8hunWoopooK9kwPZSPYC:Ezb1MlCKUQyUmjtczu6Prs9pgWoopooJ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Tasks