Overview

overview

10

Static

static

9c6febc41d...79.dll

windows7-x64

10

9c6febc41d...79.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9c6febc41dfac84e9029480a473b7cbb8a216ae3d89d99dc11585c0b35cebc79

  • Size

    540KB

  • Sample

    221203-pepyvsda2z

  • MD5

    09938db5a566e0a3d53446c440b07d84

  • SHA1

    7f2b7e12521e40eb5ad61482269f09649a8028d8

  • SHA256

    9c6febc41dfac84e9029480a473b7cbb8a216ae3d89d99dc11585c0b35cebc79

  • SHA512

    f9b8092a0ce4564be6a013f1b4ba5f9340f03d951af983eaa7de0630b1292de358e4b7a04f0fb46fb4a637ee78e5170452f8fa2c1ee214aa5fa66bdca9753744

  • SSDEEP

    12288:jehnaNPpSVZmNxRCwnwm3W3OHIIf5VVQrOAsecj8Xqc:jeh0PpS6NxNnwYeOHXrVQ5POYN

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      9c6febc41dfac84e9029480a473b7cbb8a216ae3d89d99dc11585c0b35cebc79

    • Size

      540KB

    • MD5

      09938db5a566e0a3d53446c440b07d84

    • SHA1

      7f2b7e12521e40eb5ad61482269f09649a8028d8

    • SHA256

      9c6febc41dfac84e9029480a473b7cbb8a216ae3d89d99dc11585c0b35cebc79

    • SHA512

      f9b8092a0ce4564be6a013f1b4ba5f9340f03d951af983eaa7de0630b1292de358e4b7a04f0fb46fb4a637ee78e5170452f8fa2c1ee214aa5fa66bdca9753744

    • SSDEEP

      12288:jehnaNPpSVZmNxRCwnwm3W3OHIIf5VVQrOAsecj8Xqc:jeh0PpS6NxNnwYeOHXrVQ5POYN

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks