Overview

overview

10

Static

static

8

c610c346cf...4d.exe

windows7-x64

10

c610c346cf...4d.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c610c346cf842b3f70c8fdea5353f98f154bff79a1358282509fdd887486c34d

  • Size

    53KB

  • Sample

    230130-d9lzxafh73

  • MD5

    16c173ad58c283909cc64c5d8ec7957a

  • SHA1

    9667e6baa025dac16d1e01d4fc18eebe5f5e60c8

  • SHA256

    c610c346cf842b3f70c8fdea5353f98f154bff79a1358282509fdd887486c34d

  • SHA512

    44af4a504789ef782a4844e641415be28e4aae1627aad848dff945e4650110d7b17d91f367c19913388373a11602ef05e93a2d3177e29672873f022564969d9d

  • SSDEEP

    1536:giyy4Zexm5U1E+cZDuQnjZ+bz7/M4PZPOn1n:ly491EFMyjZ+bz7/ML1

Score
10/10
ramnitbankerpersistencespywarestealertrojanupxworm

Malware Config

Targets

    • Target

      c610c346cf842b3f70c8fdea5353f98f154bff79a1358282509fdd887486c34d

    • Size

      53KB

    • MD5

      16c173ad58c283909cc64c5d8ec7957a

    • SHA1

      9667e6baa025dac16d1e01d4fc18eebe5f5e60c8

    • SHA256

      c610c346cf842b3f70c8fdea5353f98f154bff79a1358282509fdd887486c34d

    • SHA512

      44af4a504789ef782a4844e641415be28e4aae1627aad848dff945e4650110d7b17d91f367c19913388373a11602ef05e93a2d3177e29672873f022564969d9d

    • SSDEEP

      1536:giyy4Zexm5U1E+cZDuQnjZ+bz7/M4PZPOn1n:ly491EFMyjZ+bz7/ML1

    Score
    10/10
    ramnitbankerpersistencespywarestealertrojanupxworm

    • Modifies WinLogon for persistence

      persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

1
T1004

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks