Overview

overview

10

Static

static

332af93f7a...5a.dll

windows7-x64

10

332af93f7a...5a.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    332af93f7a7e9afeb58d02b6f23b9709af610b538f19dfe9c45650134ea16c5a

  • Size

    265KB

  • Sample

    221204-cw5dnadc4s

  • MD5

    559f8b8b0679fde4255d8c4d91effa90

  • SHA1

    ddc43b41b0af00bbdcaf57efcbb053c276e84e69

  • SHA256

    332af93f7a7e9afeb58d02b6f23b9709af610b538f19dfe9c45650134ea16c5a

  • SHA512

    afb87935e29ba422f527aa6cd83b69e9ddfb619dc1a6648eacbc2690ae723e19b442766ddfcd9ff78ccd2bf25ffd9df9cea1d42045bfbd00e824c8029a9cbfc3

  • SSDEEP

    6144:NNL88DWKu6odfhVKJzzbSZzvw2VfgTLgAfaVttSHb:NNYWJzSZzvPVk8G2t+b

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      332af93f7a7e9afeb58d02b6f23b9709af610b538f19dfe9c45650134ea16c5a

    • Size

      265KB

    • MD5

      559f8b8b0679fde4255d8c4d91effa90

    • SHA1

      ddc43b41b0af00bbdcaf57efcbb053c276e84e69

    • SHA256

      332af93f7a7e9afeb58d02b6f23b9709af610b538f19dfe9c45650134ea16c5a

    • SHA512

      afb87935e29ba422f527aa6cd83b69e9ddfb619dc1a6648eacbc2690ae723e19b442766ddfcd9ff78ccd2bf25ffd9df9cea1d42045bfbd00e824c8029a9cbfc3

    • SSDEEP

      6144:NNL88DWKu6odfhVKJzzbSZzvw2VfgTLgAfaVttSHb:NNYWJzSZzvPVk8G2t+b

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks