General

  • Target

    3852a5f220b06600e9a047897fcdbedde5340b207c855de0b915d8ca2ba32ded

  • Size

    718KB

  • Sample

    221127-ydldqadc87

  • MD5

    ba633199ece68248e023205b61bfbc34

  • SHA1

    7c6c93b31934eb82230fe0f6ce733d44e5d146e8

  • SHA256

    3852a5f220b06600e9a047897fcdbedde5340b207c855de0b915d8ca2ba32ded

  • SHA512

    1053108544c3dff537c5ca4518884740cd65892f85376859043e214802d9c2469cf0124e240f34cd703e7ca8e79677c280993a6e1bdfd6977e8cd336588e9428

  • SSDEEP

    12288:Szb9rMfc+CKUQyUmjtc4euuzPrs9pGp8hunWoopooK9kwPZGh:Szb1MlCKUQyUmjtczu6Prs9pgWoopooS

Malware Config

Targets

    • Target

      3852a5f220b06600e9a047897fcdbedde5340b207c855de0b915d8ca2ba32ded

    • Size

      718KB

    • MD5

      ba633199ece68248e023205b61bfbc34

    • SHA1

      7c6c93b31934eb82230fe0f6ce733d44e5d146e8

    • SHA256

      3852a5f220b06600e9a047897fcdbedde5340b207c855de0b915d8ca2ba32ded

    • SHA512

      1053108544c3dff537c5ca4518884740cd65892f85376859043e214802d9c2469cf0124e240f34cd703e7ca8e79677c280993a6e1bdfd6977e8cd336588e9428

    • SSDEEP

      12288:Szb9rMfc+CKUQyUmjtc4euuzPrs9pGp8hunWoopooK9kwPZGh:Szb1MlCKUQyUmjtczu6Prs9pgWoopooS

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Tasks