Overview

overview

10

Static

static

a95e8fed65...b5.exe

windows7-x64

10

a95e8fed65...b5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a95e8fed650e65e992ca8c7281ec7d0d7280bbd3698507fe20d2d9b6f3bd23b5

  • Size

    752KB

  • Sample

    221128-ymq1kacf22

  • MD5

    d73fac0a548825519a1402970c451a8c

  • SHA1

    9c093a5bffc1b7089cd9471e07b5dc6b772d4ed2

  • SHA256

    a95e8fed650e65e992ca8c7281ec7d0d7280bbd3698507fe20d2d9b6f3bd23b5

  • SHA512

    e2f2e17e0d493f3db087ff42a0311d9a72e6676ba27d0ecf2fa846b909dde7e5294d0fb391e5d91e01dfa224503cb81eae42fa29ced527d1be646ae02f69822b

  • SSDEEP

    12288:Wpd7/9WvqqvoaDxyAELOmWhmuyEQTb5WXLGjgVYUs4jO2:0QxyAYOmWhm8VYGS2

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      a95e8fed650e65e992ca8c7281ec7d0d7280bbd3698507fe20d2d9b6f3bd23b5

    • Size

      752KB

    • MD5

      d73fac0a548825519a1402970c451a8c

    • SHA1

      9c093a5bffc1b7089cd9471e07b5dc6b772d4ed2

    • SHA256

      a95e8fed650e65e992ca8c7281ec7d0d7280bbd3698507fe20d2d9b6f3bd23b5

    • SHA512

      e2f2e17e0d493f3db087ff42a0311d9a72e6676ba27d0ecf2fa846b909dde7e5294d0fb391e5d91e01dfa224503cb81eae42fa29ced527d1be646ae02f69822b

    • SSDEEP

      12288:Wpd7/9WvqqvoaDxyAELOmWhmuyEQTb5WXLGjgVYUs4jO2:0QxyAYOmWhm8VYGS2

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks