Overview

overview

10

Static

static

8

15e98e3e09...9c.exe

windows7-x64

10

15e98e3e09...9c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15e98e3e09c0c781970dc6434d6de9ed4758021e95c35cf500431a278e0f8d9c

  • Size

    1MB

  • Sample

    230129-r6yfesbe54

  • MD5

    d0fa1539f0f0ce91d4c0021a2b85a166

  • SHA1

    d58eddb24b7823be6b4310dea840133d90b92565

  • SHA256

    15e98e3e09c0c781970dc6434d6de9ed4758021e95c35cf500431a278e0f8d9c

  • SHA512

    4347f6d208c04f7a91dee51c84cf3552944af885ea4d1f69d69fa63e1038c7be6cc7ab4ba2670613ec9e3b81227edafb8720c25d4a336e5d44b964b12f694290

  • SSDEEP

    12288:+7t4yn8ZKWG6w1G9hSQ5m5OY/y7OEnqUd5ROzPC4+lAvZLTUsxmZUj2dZYlpeUAH:CzOhn9h9GOY675z5cjFT9Peb+lq

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      15e98e3e09c0c781970dc6434d6de9ed4758021e95c35cf500431a278e0f8d9c

    • Size

      1MB

    • MD5

      d0fa1539f0f0ce91d4c0021a2b85a166

    • SHA1

      d58eddb24b7823be6b4310dea840133d90b92565

    • SHA256

      15e98e3e09c0c781970dc6434d6de9ed4758021e95c35cf500431a278e0f8d9c

    • SHA512

      4347f6d208c04f7a91dee51c84cf3552944af885ea4d1f69d69fa63e1038c7be6cc7ab4ba2670613ec9e3b81227edafb8720c25d4a336e5d44b964b12f694290

    • SSDEEP

      12288:+7t4yn8ZKWG6w1G9hSQ5m5OY/y7OEnqUd5ROzPC4+lAvZLTUsxmZUj2dZYlpeUAH:CzOhn9h9GOY675z5cjFT9Peb+lq

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

        Discovery

          Execution

            Exfiltration

              Impact

                Initial Access

                  Lateral Movement

                    Persistence

                      Privilege Escalation

                        Tasks