Overview

overview

10

Static

static

e2f3ac2a99...e2.dll

windows7-x64

10

e2f3ac2a99...e2.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2f3ac2a99ca6d677d7facf1c713f0543bba899d0458108392f0f6916436ace2

  • Size

    176KB

  • Sample

    221202-gzqf5adh4v

  • MD5

    0a28abed86d4588bc479e9ceb30eb167

  • SHA1

    ca33b2f2b50343bfba23d7dda9e615ad1c9af28b

  • SHA256

    e2f3ac2a99ca6d677d7facf1c713f0543bba899d0458108392f0f6916436ace2

  • SHA512

    fa0252167f4573435e2503dde0954eb659cabb7ad79428e8b9e98c24a02ee753735d436c244c6d4192e3a1f1d19d306ddd032c6dca73d08fb1d3c1fa7ca7b61d

  • SSDEEP

    3072:kn4cV8gf2u41Z5tKlza7Mi6ZWzj9XV9WidCxlOT1:W4y8gOl29a7M0JXXbdCQ1

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      e2f3ac2a99ca6d677d7facf1c713f0543bba899d0458108392f0f6916436ace2

    • Size

      176KB

    • MD5

      0a28abed86d4588bc479e9ceb30eb167

    • SHA1

      ca33b2f2b50343bfba23d7dda9e615ad1c9af28b

    • SHA256

      e2f3ac2a99ca6d677d7facf1c713f0543bba899d0458108392f0f6916436ace2

    • SHA512

      fa0252167f4573435e2503dde0954eb659cabb7ad79428e8b9e98c24a02ee753735d436c244c6d4192e3a1f1d19d306ddd032c6dca73d08fb1d3c1fa7ca7b61d

    • SSDEEP

      3072:kn4cV8gf2u41Z5tKlza7Mi6ZWzj9XV9WidCxlOT1:W4y8gOl29a7M0JXXbdCQ1

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks