Overview

overview

10

Static

static

92a2fb29c5...7d.exe

windows7-x64

10

92a2fb29c5...7d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    92a2fb29c515df2f2c5bbfa50d4a5ca097a1991a19fa620d8b539b92d6178e7d

  • Size

    243KB

  • Sample

    221128-ymzmpscf36

  • MD5

    e590a62c837587478c8980e9a6ae05ae

  • SHA1

    b56d442b6d8a754a9be82f85fc5cd32f0d5bbf21

  • SHA256

    92a2fb29c515df2f2c5bbfa50d4a5ca097a1991a19fa620d8b539b92d6178e7d

  • SHA512

    f692a325891ddedd4ebfe0c741a7fb29976f15bce095ae5fd3b6b041caa98f8dca8b4605fdc1057f91e69d1e60a62c5afd6ecd52a646bb634a3a6e06038fa255

  • SSDEEP

    6144:RJeosL3H7J9xoCHSfDEzz7ZQPXgtl6IQJpUaxFMJr:RJeosT7JHLzzV+XMaXU

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      92a2fb29c515df2f2c5bbfa50d4a5ca097a1991a19fa620d8b539b92d6178e7d

    • Size

      243KB

    • MD5

      e590a62c837587478c8980e9a6ae05ae

    • SHA1

      b56d442b6d8a754a9be82f85fc5cd32f0d5bbf21

    • SHA256

      92a2fb29c515df2f2c5bbfa50d4a5ca097a1991a19fa620d8b539b92d6178e7d

    • SHA512

      f692a325891ddedd4ebfe0c741a7fb29976f15bce095ae5fd3b6b041caa98f8dca8b4605fdc1057f91e69d1e60a62c5afd6ecd52a646bb634a3a6e06038fa255

    • SSDEEP

      6144:RJeosL3H7J9xoCHSfDEzz7ZQPXgtl6IQJpUaxFMJr:RJeosT7JHLzzV+XMaXU

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks