Overview

overview

10

Static

static

46f62bfc5a...ab.dll

windows7-x64

10

46f62bfc5a...ab.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    46f62bfc5afe4784f764a6da1565cc60750752a511f852adfa871d214a16e3ab

  • Size

    917KB

  • Sample

    221204-cvgk7shc63

  • MD5

    1f16be3e0472ec8e88dc2e1ddd2d12b0

  • SHA1

    dcf34753cd9282c36b9ae47c1f4b027922e3328b

  • SHA256

    46f62bfc5afe4784f764a6da1565cc60750752a511f852adfa871d214a16e3ab

  • SHA512

    621fb41031cde5b35cdb3a33d5d2b42817a41b76ebabca793f7ffd77e2124d215ed25bfaae021251bd2c199e86e7d0e186733b8f620f6bd8bbb0dc9253ea0234

  • SSDEEP

    24576:62VtoLugO+kjYN99Cdl/Up5OYkuWVBMyqniUjsM8rQuG:6WmLspYN99C/Up5OpuWVBMyqniUj1

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      46f62bfc5afe4784f764a6da1565cc60750752a511f852adfa871d214a16e3ab

    • Size

      917KB

    • MD5

      1f16be3e0472ec8e88dc2e1ddd2d12b0

    • SHA1

      dcf34753cd9282c36b9ae47c1f4b027922e3328b

    • SHA256

      46f62bfc5afe4784f764a6da1565cc60750752a511f852adfa871d214a16e3ab

    • SHA512

      621fb41031cde5b35cdb3a33d5d2b42817a41b76ebabca793f7ffd77e2124d215ed25bfaae021251bd2c199e86e7d0e186733b8f620f6bd8bbb0dc9253ea0234

    • SSDEEP

      24576:62VtoLugO+kjYN99Cdl/Up5OYkuWVBMyqniUjsM8rQuG:6WmLspYN99C/Up5OpuWVBMyqniUj1

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks