General

  • Target

    dfb1a6c992d18a677422b8c450b21fa98797ac89ba5b017197e5b09f22e90bf1

  • Size

    724KB

  • Sample

    221202-gzx6zadh4y

  • MD5

    13a181e13db5ea362b0933e606322618

  • SHA1

    1d1f63c44c58b436f9accbb1d37707372495eb20

  • SHA256

    dfb1a6c992d18a677422b8c450b21fa98797ac89ba5b017197e5b09f22e90bf1

  • SHA512

    c2a11b835ac134913b0a6958bc2c0f9037f8c862ff333050adf1e2a4b4533ca4d4e1c2372b149b4f13ff5647f1be72b65cd6a28e0de5687528c1e5e64a620295

  • SSDEEP

    12288:NPTv+CFW4hPdahP/RN2kU7fWS36pweWGJr619QV4qqxEnEk3D6qC5UjuB4TQ+TJa:NPSH4hQP/RN2fLqNK9QV4qBH17pTJa

Malware Config

Targets

    • Target

      dfb1a6c992d18a677422b8c450b21fa98797ac89ba5b017197e5b09f22e90bf1

    • Size

      724KB

    • MD5

      13a181e13db5ea362b0933e606322618

    • SHA1

      1d1f63c44c58b436f9accbb1d37707372495eb20

    • SHA256

      dfb1a6c992d18a677422b8c450b21fa98797ac89ba5b017197e5b09f22e90bf1

    • SHA512

      c2a11b835ac134913b0a6958bc2c0f9037f8c862ff333050adf1e2a4b4533ca4d4e1c2372b149b4f13ff5647f1be72b65cd6a28e0de5687528c1e5e64a620295

    • SSDEEP

      12288:NPTv+CFW4hPdahP/RN2kU7fWS36pweWGJr619QV4qqxEnEk3D6qC5UjuB4TQ+TJa:NPSH4hQP/RN2fLqNK9QV4qBH17pTJa

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Tasks