Overview

overview

10

Static

static

dbfeb39d29...48.dll

windows7-x64

10

dbfeb39d29...48.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dbfeb39d29dee0a08926a06624c8c9fe49927e1b6d2b505562931b897341b148

  • Size

    79KB

  • Sample

    221128-ymazcace66

  • MD5

    5e25d0f905e8408f8c09df9c61b5200c

  • SHA1

    10a6bb5b23a7daf5a257fe86dd5dac8f4d0985de

  • SHA256

    dbfeb39d29dee0a08926a06624c8c9fe49927e1b6d2b505562931b897341b148

  • SHA512

    3952f65ae6913660a9abb2e68790d8d9f59b783bb290a27502025e39cef8eaf460b45115fc100fa23125c1fe5e20573d7b548dab7f4e71e7b6c022eabcc0ec4a

  • SSDEEP

    1536:iynK7JTNsNSJh3goUu6uF1KGl8n7J8jqmAloOtnrb7dMxlF5ZUI2R2f:pnqiQ3goUufgG68dMo8Z2f

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      dbfeb39d29dee0a08926a06624c8c9fe49927e1b6d2b505562931b897341b148

    • Size

      79KB

    • MD5

      5e25d0f905e8408f8c09df9c61b5200c

    • SHA1

      10a6bb5b23a7daf5a257fe86dd5dac8f4d0985de

    • SHA256

      dbfeb39d29dee0a08926a06624c8c9fe49927e1b6d2b505562931b897341b148

    • SHA512

      3952f65ae6913660a9abb2e68790d8d9f59b783bb290a27502025e39cef8eaf460b45115fc100fa23125c1fe5e20573d7b548dab7f4e71e7b6c022eabcc0ec4a

    • SSDEEP

      1536:iynK7JTNsNSJh3goUu6uF1KGl8n7J8jqmAloOtnrb7dMxlF5ZUI2R2f:pnqiQ3goUufgG68dMo8Z2f

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks