Overview

overview

10

Static

static

7

Device/Har...dF.exe

windows7-x64

10

Device/Har...dF.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    TVnHnIdF.exe

  • Size

    86KB

  • Sample

    230602-ljyvsabc2s

  • MD5

    4ef0d128462d9550c0f1c0e99a0a4bc2

  • SHA1

    6bc875b243b6557caa2770d56abdcb5cf3bfed7d

  • SHA256

    7d5d233c82d72690af3b2ab1e4ed4e8a0ae63f633d920379bbdca224fd126790

  • SHA512

    cec46bf180d38da08e07a3ba7dc19cb3b2781fcb085e172eb50be53f683779e856fb17ff2c319592b00821a931e237796c986b787c17f2905b1aae7fb6f3e647

  • SSDEEP

    1536:NRvXjbKjNcnoXcYCSsYiQPhGiV0d99dT2449wkw7ZCHjKBQUUtxdppSUAPtvI8M6:nXXKRcgMutsh2Z9FiZiQQntDuz

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      Device/HarddiskVolume9/RECYCLER/S-3-5-01-4621304173-6055156028-813125507-4057/TVnHnIdF.exe

    • Size

      185KB

    • MD5

      59157bcbfe97f9f8b00af1eb39c87a53

    • SHA1

      63f11e1730237a17d71bb1927e67f561a7dec607

    • SHA256

      d49df261cebcfdc69c73a485002786c0ace31ee0c85cbfe45b830de3c737b941

    • SHA512

      034a730883b0436326b67e996182e0749513f2e1be8b554ff91cfc121d0ea38c7651e0b2dbfadcb34e7b43b54b2fecf35cf8135b227ffe6717e356c5f17ca65c

    • SSDEEP

      1536:+OC0FvV4OguHxjhpA4Bm7uW0vSUsghQevBFkutIbgTuFqKRr0aF5frleGhd9TfBi:+wV4OgSzBmh04eZFkz3Rr0gwGj9Tf8

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks