General

  • Target

    1215b3ff9a131f20d61a10153d89a86b98935ded2f0a32efdc948dc6b530fc98

  • Size

    298KB

  • Sample

    221127-yd146sdd34

  • MD5

    c290492d7a50c57952e53fb9933bd979

  • SHA1

    6d1cd31beedd962f966b4fbbbd8f595d1cf91aef

  • SHA256

    1215b3ff9a131f20d61a10153d89a86b98935ded2f0a32efdc948dc6b530fc98

  • SHA512

    6c640bae331a3e6f4b4b87bc9ad89974b830967a4567d24bf90663fab6abc4e48d6bb04c307adf8d8a25938de44702bd81137a18f3929b6a94986783c879f6ca

  • SSDEEP

    6144:WxGMku94XCzTurXzURlbDC9K69u2m+SqOWcsQQKiY4leDDGoggH/VREG6j4Gm01b:WxGCOXzURlbDC9K69u2m+SqOWcsQQKiD

Malware Config

Targets

    • Target

      1215b3ff9a131f20d61a10153d89a86b98935ded2f0a32efdc948dc6b530fc98

    • Size

      298KB

    • MD5

      c290492d7a50c57952e53fb9933bd979

    • SHA1

      6d1cd31beedd962f966b4fbbbd8f595d1cf91aef

    • SHA256

      1215b3ff9a131f20d61a10153d89a86b98935ded2f0a32efdc948dc6b530fc98

    • SHA512

      6c640bae331a3e6f4b4b87bc9ad89974b830967a4567d24bf90663fab6abc4e48d6bb04c307adf8d8a25938de44702bd81137a18f3929b6a94986783c879f6ca

    • SSDEEP

      6144:WxGMku94XCzTurXzURlbDC9K69u2m+SqOWcsQQKiY4leDDGoggH/VREG6j4Gm01b:WxGCOXzURlbDC9K69u2m+SqOWcsQQKiD

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Tasks