Overview

overview

10

Static

static

50d9729617...11.dll

windows7-x64

10

50d9729617...11.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    50d9729617796bbb06f6f416813bcf09d8f6609c5a72f078cf766f86d9f45411

  • Size

    848KB

  • Sample

    221127-ydb52sdc76

  • MD5

    6130e55287a331f8ec7e6be56a79ce38

  • SHA1

    9a4630a9e7cfeee3cf118bff712418d6295dcabd

  • SHA256

    50d9729617796bbb06f6f416813bcf09d8f6609c5a72f078cf766f86d9f45411

  • SHA512

    c9ad6631267938ebe8c2efa1d6bfb82ceda8894aaf827117770e3cc1d47aaf97074af4745208a4fd061bb85a70a87894b0db3acc1603703bec0082193b2136d2

  • SSDEEP

    24576:si+oFrc+pSkOjcQN51cxO2XIdLtaL2PfKeVx1r5Xdxofg:nhF4iDQkfXIdLta+iQ1rRdxog

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      50d9729617796bbb06f6f416813bcf09d8f6609c5a72f078cf766f86d9f45411

    • Size

      848KB

    • MD5

      6130e55287a331f8ec7e6be56a79ce38

    • SHA1

      9a4630a9e7cfeee3cf118bff712418d6295dcabd

    • SHA256

      50d9729617796bbb06f6f416813bcf09d8f6609c5a72f078cf766f86d9f45411

    • SHA512

      c9ad6631267938ebe8c2efa1d6bfb82ceda8894aaf827117770e3cc1d47aaf97074af4745208a4fd061bb85a70a87894b0db3acc1603703bec0082193b2136d2

    • SSDEEP

      24576:si+oFrc+pSkOjcQN51cxO2XIdLtaL2PfKeVx1r5Xdxofg:nhF4iDQkfXIdLta+iQ1rRdxog

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks