Overview

overview

10

Static

static

7

SetConfigSrv.exe

windows7-x64

10

SetConfigSrv.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SetConfigSrv.exe

  • Size

    111KB

  • Sample

    230829-pff3cafd5w

  • MD5

    211b90d0f18479996b314d7bef9b608c

  • SHA1

    56a8e66e94171a168671e8fbcfc9e38671c01174

  • SHA256

    262c8aa0f9f94ba688046cf801a69e358705144c39e09a78214a9a95e717bc1e

  • SHA512

    f5e108c1eb1b65409971dd3877b3451847e2d3f10238cfc1a253d771d52c0bcda4d4cefc8372f0249b79feabb9da8acea16873e3622266019ef9c846ea181e3c

  • SSDEEP

    3072:TROzoTq0+RO7IwnYey7/6qxTJNXkXI9X8dC:1kdNwBG+qxtNXkXIV

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      SetConfigSrv.exe

    • Size

      111KB

    • MD5

      211b90d0f18479996b314d7bef9b608c

    • SHA1

      56a8e66e94171a168671e8fbcfc9e38671c01174

    • SHA256

      262c8aa0f9f94ba688046cf801a69e358705144c39e09a78214a9a95e717bc1e

    • SHA512

      f5e108c1eb1b65409971dd3877b3451847e2d3f10238cfc1a253d771d52c0bcda4d4cefc8372f0249b79feabb9da8acea16873e3622266019ef9c846ea181e3c

    • SSDEEP

      3072:TROzoTq0+RO7IwnYey7/6qxTJNXkXI9X8dC:1kdNwBG+qxtNXkXIV

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks