General

  • Target

    0136bb1ddb72a452a27c4928b17fb166470daaf7ed6918de42cb7ed263861ebc

  • Size

    8.1MB

  • Sample

    221127-yeanlsdd48

  • MD5

    d7c48e32c5044e13d8473a8db04fdfac

  • SHA1

    f00477cde3b8b00ad9df8adb197da389a02105bd

  • SHA256

    0136bb1ddb72a452a27c4928b17fb166470daaf7ed6918de42cb7ed263861ebc

  • SHA512

    a24e8bc4b55e6fb0bee8b60b3146f3084b621d59bc8a37bc9b8aad7f20540211fd84c52299b6f735298e23f070e6008ba69bed9ae4bedbaff2b2a6bc95cae32f

  • SSDEEP

    196608:WQFNkN2+SF14eTLYA2RDSbB06Hg34rJwklyQOVSjavOPSiwgCjJL1:WQzt9p2h6Hg8JwlQOV5Oa/PjN1

Malware Config

Targets

    • Target

      0136bb1ddb72a452a27c4928b17fb166470daaf7ed6918de42cb7ed263861ebc

    • Size

      8.1MB

    • MD5

      d7c48e32c5044e13d8473a8db04fdfac

    • SHA1

      f00477cde3b8b00ad9df8adb197da389a02105bd

    • SHA256

      0136bb1ddb72a452a27c4928b17fb166470daaf7ed6918de42cb7ed263861ebc

    • SHA512

      a24e8bc4b55e6fb0bee8b60b3146f3084b621d59bc8a37bc9b8aad7f20540211fd84c52299b6f735298e23f070e6008ba69bed9ae4bedbaff2b2a6bc95cae32f

    • SSDEEP

      196608:WQFNkN2+SF14eTLYA2RDSbB06Hg34rJwklyQOVSjavOPSiwgCjJL1:WQzt9p2h6Hg8JwlQOV5Oa/PjN1

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Discovery

System Information Discovery

1
T1082

Tasks