Overview

overview

10

Static

static

8

c16b01a1f8...21.exe

windows7-x64

10

c16b01a1f8...21.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c16b01a1f81f754486b08cf90b70b7cf0b8a3c6d593a04486ab750e3cde68721

  • Size

    329KB

  • Sample

    230129-jybbxseh49

  • MD5

    1bf102fb31ae779cacb418b1cdff3c60

  • SHA1

    1af48a92b2ab09d655f96470342a2c7dc30afe97

  • SHA256

    c16b01a1f81f754486b08cf90b70b7cf0b8a3c6d593a04486ab750e3cde68721

  • SHA512

    3af419a6e15af403344306ed03bcd39a410ae2a262b101a21b4ff7866131bf69e386e987830887c51c63d3cf5b3ebed162787955df7d9da0454af0583256a610

  • SSDEEP

    3072:frSFhxp7xHSc7qzPKb/0at9ayXAVJlz0rpl:whxFxy8qeb/9zaw+zyp

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      c16b01a1f81f754486b08cf90b70b7cf0b8a3c6d593a04486ab750e3cde68721

    • Size

      329KB

    • MD5

      1bf102fb31ae779cacb418b1cdff3c60

    • SHA1

      1af48a92b2ab09d655f96470342a2c7dc30afe97

    • SHA256

      c16b01a1f81f754486b08cf90b70b7cf0b8a3c6d593a04486ab750e3cde68721

    • SHA512

      3af419a6e15af403344306ed03bcd39a410ae2a262b101a21b4ff7866131bf69e386e987830887c51c63d3cf5b3ebed162787955df7d9da0454af0583256a610

    • SSDEEP

      3072:frSFhxp7xHSc7qzPKb/0at9ayXAVJlz0rpl:whxFxy8qeb/9zaw+zyp

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks