Overview

overview

10

Static

static

1

93c4dd2046...e2.exe

windows7-x64

10

93c4dd2046...e2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    93c4dd20465a308ead1330367cfb9547dab9c5fbcfe3b52b3fe559d3af439be2

  • Size

    9.0MB

  • Sample

    221128-ymxs4scf33

  • MD5

    065ee23e1dc2994ce5aa76e0de7a1859

  • SHA1

    f35d63a2efa169fca8b3073ab1010c78ac462391

  • SHA256

    93c4dd20465a308ead1330367cfb9547dab9c5fbcfe3b52b3fe559d3af439be2

  • SHA512

    2770a4e5e1e834561f1bfa87698e6027f3d3ecc343ae5ced39642e13e0bee3dc1b2cf05eea339f172696c6e754cc34d7f157b98efda04eb71cf89ad27d5141b2

  • SSDEEP

    196608:6IEfQOSh1yoOYf09LRU+gDknchXmod5Jq6RvItpldURjb:BEebr/0VD8HXRgEb

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      93c4dd20465a308ead1330367cfb9547dab9c5fbcfe3b52b3fe559d3af439be2

    • Size

      9.0MB

    • MD5

      065ee23e1dc2994ce5aa76e0de7a1859

    • SHA1

      f35d63a2efa169fca8b3073ab1010c78ac462391

    • SHA256

      93c4dd20465a308ead1330367cfb9547dab9c5fbcfe3b52b3fe559d3af439be2

    • SHA512

      2770a4e5e1e834561f1bfa87698e6027f3d3ecc343ae5ced39642e13e0bee3dc1b2cf05eea339f172696c6e754cc34d7f157b98efda04eb71cf89ad27d5141b2

    • SSDEEP

      196608:6IEfQOSh1yoOYf09LRU+gDknchXmod5Jq6RvItpldURjb:BEebr/0VD8HXRgEb

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks