General

  • Target

    13d3aab1560b8f35fa9e93bbdfb2497364ced7ea94e7ff1f43a50806b959e1cd

  • Size

    152KB

  • Sample

    221127-yd1teadd32

  • MD5

    c3fe36c180b99b948c3b40b7d647363c

  • SHA1

    0943db3fd21463372fc708aa812d14aa36fcec1e

  • SHA256

    13d3aab1560b8f35fa9e93bbdfb2497364ced7ea94e7ff1f43a50806b959e1cd

  • SHA512

    78bbdf2c402719e5d26c735a9cf2a44b8bbbd45f1e04407a66aa7aaec3eae39d4c3e7fab2287a7d43425c9374f12cde51b31811d5b6a70f55a36b1105cf1a861

  • SSDEEP

    1536:Ym43KToJcVmBapBQ7op2u4PkUGelpLt5Pt36lR4uVCDsQFRP2C/44N4DXs8aE6yw:bn4cV8gf2u41Z5tKlmuMD0vDcVywPgS

Malware Config

Targets

    • Target

      13d3aab1560b8f35fa9e93bbdfb2497364ced7ea94e7ff1f43a50806b959e1cd

    • Size

      152KB

    • MD5

      c3fe36c180b99b948c3b40b7d647363c

    • SHA1

      0943db3fd21463372fc708aa812d14aa36fcec1e

    • SHA256

      13d3aab1560b8f35fa9e93bbdfb2497364ced7ea94e7ff1f43a50806b959e1cd

    • SHA512

      78bbdf2c402719e5d26c735a9cf2a44b8bbbd45f1e04407a66aa7aaec3eae39d4c3e7fab2287a7d43425c9374f12cde51b31811d5b6a70f55a36b1105cf1a861

    • SSDEEP

      1536:Ym43KToJcVmBapBQ7op2u4PkUGelpLt5Pt36lR4uVCDsQFRP2C/44N4DXs8aE6yw:bn4cV8gf2u41Z5tKlmuMD0vDcVywPgS

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Tasks