Overview

overview

10

Static

static

1

screenscrew.exe

windows7-x64

10

screenscrew.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    screenscrew.bin.zip

  • Size

    159KB

  • Sample

    230215-vt6stacg4t

  • MD5

    1984ba845473e90f56b1afa69a6acd5f

  • SHA1

    f4a49068eb6c31bbe38771ddae43e8bdb6477b2c

  • SHA256

    c6f9d99ed9e8df5f4aa95a18aeb1e5a46f243613b2b4e665bfdfd9bf1297675b

  • SHA512

    15af19e40f155ece23f06fcd4f9a5b53cb9e567b7623969d5fa36b019fd287f5289cbb48ef20ad10f206a5e57a8847771ed43bb6172742d7fe746b49eca36721

  • SSDEEP

    3072:7LgK/EqEyBfy4nV1Z/A7lrDoifUSTaTjXwCpjzNDzM2y2af2fCqX14eM:74qs4V1ZXaUuCRdLLaQXWeM

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      screenscrew.bin

    • Size

      208KB

    • MD5

      945b7c1e892f71a99501713f046c76df

    • SHA1

      8f76218c073ffdcc59c3eea13e0c08830490c0da

    • SHA256

      c66ddec3e1dfb026c3cd7c6b5cc5a086b746fe3543df279e0935204caeafa551

    • SHA512

      799bd3646b0c550a945d8aecef916bc38a186b2c501606da214b30a4fa7ad4f168b120cad1a022c28e236578f3be4515a1b667c6cf1374317648e3427927a5d7

    • SSDEEP

      3072:A0J9QbLkewys+C6pNxFE7Z6wAOpw7DZ6/:Z9QboZyJp7xq6wAZU

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks