Overview

overview

10

Static

static

1

ca87033a32...01.exe

windows7-x64

10

ca87033a32...01.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ca87033a32f8920487887e743cf9252e8b9c0c3e7566ffb5d7a3bf53ec339601

  • Size

    152KB

  • Sample

    230306-1knhrsfa22

  • MD5

    c225c65785d49911640d20b2ced3d793

  • SHA1

    885689f3dc20c80ff698f81675c25507814d11cc

  • SHA256

    ca87033a32f8920487887e743cf9252e8b9c0c3e7566ffb5d7a3bf53ec339601

  • SHA512

    ce0db431c81ef2be7db1d193e34f339b6fc8fee29eec7c65be946091a06b959331b513a91dac84c4a0f6533b5df4561dcc94c0ca34014f36b0b6fba75c63cd95

  • SSDEEP

    3072:+5BIyIUVC2icZrekv7DTaH2W1uI27EVyXT3r7o7zdwAmnZC+/o9uSvbXx9GB:2iw1zaWWoNERzCAmZAtvbBM

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      ca87033a32f8920487887e743cf9252e8b9c0c3e7566ffb5d7a3bf53ec339601

    • Size

      152KB

    • MD5

      c225c65785d49911640d20b2ced3d793

    • SHA1

      885689f3dc20c80ff698f81675c25507814d11cc

    • SHA256

      ca87033a32f8920487887e743cf9252e8b9c0c3e7566ffb5d7a3bf53ec339601

    • SHA512

      ce0db431c81ef2be7db1d193e34f339b6fc8fee29eec7c65be946091a06b959331b513a91dac84c4a0f6533b5df4561dcc94c0ca34014f36b0b6fba75c63cd95

    • SSDEEP

      3072:+5BIyIUVC2icZrekv7DTaH2W1uI27EVyXT3r7o7zdwAmnZC+/o9uSvbXx9GB:2iw1zaWWoNERzCAmZAtvbBM

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks