General

  • Target

    5baeeb470a72cdeb472e9ba549580a6f962d26bf1adefafd343733ae48aa20a0.zip

  • Size

    141KB

  • Sample

    230519-wevmnsfa88

  • MD5

    ebcf6141289e2144533e7040397f4c58

  • SHA1

    42e5be4454c22cfb4c50fce2f39b9e28621c5b9e

  • SHA256

    626d410227d948ec372775ce0eb1844c62e3794efe0a7460735e0f9bf30fdef6

  • SHA512

    0d1597b65968c93101f6d381ff5aa51b0e7b9649850f475ecd5be3cc3df24a8468a20733b56c6ac0ebae276387bda7ca8b5f906972a4d4f928b85d134b0624d8

  • SSDEEP

    3072:fMJ1DOAX1hSSRFKpgfBU9ZXVR9EZlsTxxO8y3D0Ay0u/biakkEQs:fQlzl1/ZpUn39EZObhyTvtaX9s

Malware Config

Targets

    • Target

      C/ProgramData/Sentinel/AFUCache/5baeeb470a72cdeb472e9ba549580a6f962d26bf1adefafd343733ae48aa20a0

    • Size

      294KB

    • MD5

      88364591c29935142382c7c04a6cfcfe

    • SHA1

      c5c956f5fa522b8e97fbb4ed534d0ccca0d54d06

    • SHA256

      5baeeb470a72cdeb472e9ba549580a6f962d26bf1adefafd343733ae48aa20a0

    • SHA512

      6f104c05e464dc521ebd33d00b31f0431031c349f8805fc5e976f636f0800e5d1ea339d822cee4999147ecf89efa4f38491e6678926d1d27d4f9ad1c365e8b36

    • SSDEEP

      3072:CsixsE5b3mZCwC1AtgZ4GPd0AwQcNvS43sRzzwJORCEGqUjQOBIN:CsiRbnwCumev7643sBTY7FNs

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Tasks