Overview

overview

10

Static

static

fd222f043e...b1.exe

windows7-x64

10

fd222f043e...b1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd222f043e2478a1ad7bf635022b75368b8b2f93fd36fed8a4bd4bfbc30b1cb1

  • Size

    286KB

  • Sample

    221128-ylxrqace35

  • MD5

    81ef71ac4e220ecb9351735e2d000693

  • SHA1

    1daf99adc2d213cc5c4c821a54ebcb9a19312ad8

  • SHA256

    fd222f043e2478a1ad7bf635022b75368b8b2f93fd36fed8a4bd4bfbc30b1cb1

  • SHA512

    4cbd10840323ea4342069288219b18c1290069c99625b65bf4b4641e6c4eb7a82120e785ca7b468251a31816d035a6daaa8db80c5995f06473f4f58f138f849c

  • SSDEEP

    6144:PKDD5Z0iup29MO3eJmUeAtaEgOVOAW9Jqz4bcEriibydQcfFV:PKf0xp29/urQgRW9Ea3b8Qcf

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      fd222f043e2478a1ad7bf635022b75368b8b2f93fd36fed8a4bd4bfbc30b1cb1

    • Size

      286KB

    • MD5

      81ef71ac4e220ecb9351735e2d000693

    • SHA1

      1daf99adc2d213cc5c4c821a54ebcb9a19312ad8

    • SHA256

      fd222f043e2478a1ad7bf635022b75368b8b2f93fd36fed8a4bd4bfbc30b1cb1

    • SHA512

      4cbd10840323ea4342069288219b18c1290069c99625b65bf4b4641e6c4eb7a82120e785ca7b468251a31816d035a6daaa8db80c5995f06473f4f58f138f849c

    • SSDEEP

      6144:PKDD5Z0iup29MO3eJmUeAtaEgOVOAW9Jqz4bcEriibydQcfFV:PKf0xp29/urQgRW9Ea3b8Qcf

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks