General

  • Target

    7df1d92450fe75c9f8196f117923dc95ab8e2e06fcba692931dbaeb99cabb0cb

  • Size

    808KB

  • Sample

    221127-ycdmgsdc29

  • MD5

    7cd871cce2ed190fc3dc62eae3e768e4

  • SHA1

    492574e56f56a770207ef1e4c8f21c31140c8917

  • SHA256

    7df1d92450fe75c9f8196f117923dc95ab8e2e06fcba692931dbaeb99cabb0cb

  • SHA512

    7eb34f9a5c8d63130f96a2ee3e11249e835026b26435746860957621feba8e18014d8adee6cf4925032aa4e425b754a1dff0aa3158b5bea3bf3517c0e01f3f12

  • SSDEEP

    12288:s+EWWG2wKvxCitPNNVOGF3xjH/07SwqHN:sLxGpKvxPtlNVOGFlH/0dq

Malware Config

Targets

    • Target

      7df1d92450fe75c9f8196f117923dc95ab8e2e06fcba692931dbaeb99cabb0cb

    • Size

      808KB

    • MD5

      7cd871cce2ed190fc3dc62eae3e768e4

    • SHA1

      492574e56f56a770207ef1e4c8f21c31140c8917

    • SHA256

      7df1d92450fe75c9f8196f117923dc95ab8e2e06fcba692931dbaeb99cabb0cb

    • SHA512

      7eb34f9a5c8d63130f96a2ee3e11249e835026b26435746860957621feba8e18014d8adee6cf4925032aa4e425b754a1dff0aa3158b5bea3bf3517c0e01f3f12

    • SSDEEP

      12288:s+EWWG2wKvxCitPNNVOGF3xjH/07SwqHN:sLxGpKvxPtlNVOGFlH/0dq

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Blocklisted process makes network request

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Tasks