Overview

overview

10

Static

static

e472317a0a...3a.dll

windows7-x64

10

e472317a0a...3a.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e472317a0a81c31ad761e7014e92b06b8e7680fd134d546172448898dd5ddb3a

  • Size

    67KB

  • Sample

    221128-yl7a6ace58

  • MD5

    0b4ff0c47f18d9b9571a5f4890c315be

  • SHA1

    2851b99a06b16a696401c2028cf7bbf309c5b570

  • SHA256

    e472317a0a81c31ad761e7014e92b06b8e7680fd134d546172448898dd5ddb3a

  • SHA512

    4c77845cdd98c95bdefe4e3d226e0a88eecf84655dbf8bb2f033e57f988957d6a39c4c9616851c79b0457f4ca435043e5e3ca7077c7861d5f832468e29edb3f1

  • SSDEEP

    1536:WIfbmlHiWgAEbyAXr8f7e+ZJThMedB8Z+2/TYw:7filjEbyi0eATjdCZ+v

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      e472317a0a81c31ad761e7014e92b06b8e7680fd134d546172448898dd5ddb3a

    • Size

      67KB

    • MD5

      0b4ff0c47f18d9b9571a5f4890c315be

    • SHA1

      2851b99a06b16a696401c2028cf7bbf309c5b570

    • SHA256

      e472317a0a81c31ad761e7014e92b06b8e7680fd134d546172448898dd5ddb3a

    • SHA512

      4c77845cdd98c95bdefe4e3d226e0a88eecf84655dbf8bb2f033e57f988957d6a39c4c9616851c79b0457f4ca435043e5e3ca7077c7861d5f832468e29edb3f1

    • SSDEEP

      1536:WIfbmlHiWgAEbyAXr8f7e+ZJThMedB8Z+2/TYw:7filjEbyi0eATjdCZ+v

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks