Overview

overview

10

Static

static

7

eZGBWtXo.exe

windows7-x64

10

eZGBWtXo.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eZGBWtXo.exe

  • Size

    105KB

  • Sample

    230517-lx8bdaef37

  • MD5

    ffadb3083695657ff11b3ec0030f84d9

  • SHA1

    9597cc24a22c1a344cdd3179de91d63346045562

  • SHA256

    203b4b09f6aaacb22acc0d090cd2427cbf973abba6df229e02ce8f17686f91dd

  • SHA512

    279743502dd77c4578198cfd05a16294952fa1bb96eeb03997c8c23f39d08099c0de9219d2fca50da3dc7322dfbc2d6371feb044b25aca79d3e77a8ef7223d1d

  • SSDEEP

    1536:sOC0FvV4OguHxjhpA4Bm7uW0vSUsghQevBFkutIbgTuFqKRr0aF5frleGhd9TfBi:swV4OgSzBmh04eZFkz3Rr0gwGj9Tf8

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      eZGBWtXo.exe

    • Size

      105KB

    • MD5

      ffadb3083695657ff11b3ec0030f84d9

    • SHA1

      9597cc24a22c1a344cdd3179de91d63346045562

    • SHA256

      203b4b09f6aaacb22acc0d090cd2427cbf973abba6df229e02ce8f17686f91dd

    • SHA512

      279743502dd77c4578198cfd05a16294952fa1bb96eeb03997c8c23f39d08099c0de9219d2fca50da3dc7322dfbc2d6371feb044b25aca79d3e77a8ef7223d1d

    • SSDEEP

      1536:sOC0FvV4OguHxjhpA4Bm7uW0vSUsghQevBFkutIbgTuFqKRr0aF5frleGhd9TfBi:swV4OgSzBmh04eZFkz3Rr0gwGj9Tf8

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks