Overview

overview

10

Static

static

de27547d80...c6.dll

windows7-x64

10

de27547d80...c6.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de27547d80b440da73ec990a5500147c1bfb3fe8af803d2415821383d8923cc6

  • Size

    96KB

  • Sample

    221202-gz25xsdh5w

  • MD5

    eeeb67a2ce190f54a83b629e48a95500

  • SHA1

    892c5f924a192cec89d062e3868ecdc294ca7000

  • SHA256

    de27547d80b440da73ec990a5500147c1bfb3fe8af803d2415821383d8923cc6

  • SHA512

    208e472da7312d4959403fe243e56564d4513f487c92d0a46a03b998ec67e4f832bd9fcc06c5d5cb1d02598ef9586486f1af8776cf0cdc686a2a932c8eecbcae

  • SSDEEP

    1536:YibToqp78Ccg4mDjZu0D1ZHqjrQYw3itYZo60bFjc:YibTTp78Ccg4mDtVRZ4PwytYZub+

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      de27547d80b440da73ec990a5500147c1bfb3fe8af803d2415821383d8923cc6

    • Size

      96KB

    • MD5

      eeeb67a2ce190f54a83b629e48a95500

    • SHA1

      892c5f924a192cec89d062e3868ecdc294ca7000

    • SHA256

      de27547d80b440da73ec990a5500147c1bfb3fe8af803d2415821383d8923cc6

    • SHA512

      208e472da7312d4959403fe243e56564d4513f487c92d0a46a03b998ec67e4f832bd9fcc06c5d5cb1d02598ef9586486f1af8776cf0cdc686a2a932c8eecbcae

    • SSDEEP

      1536:YibToqp78Ccg4mDjZu0D1ZHqjrQYw3itYZo60bFjc:YibTTp78Ccg4mDtVRZ4PwytYZub+

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks