Overview

overview

10

Static

static

3

NEAS.f9a2d...JC.exe

windows7-x64

10

NEAS.f9a2d...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.f9a2d5b77f5185d5f15b53a862145ad0f656fe872273ace0dc9bce7f67d00adf_JC.exe

  • Size

    3.5MB

  • Sample

    231008-vjt19sgh47

  • MD5

    b45ec8f7811380b20823afcb743ebd25

  • SHA1

    6d1905f59bf6110a371d7003b8cba47c3b5e8437

  • SHA256

    f9a2d5b77f5185d5f15b53a862145ad0f656fe872273ace0dc9bce7f67d00adf

  • SHA512

    76c63416e92567e7dba2b1565480025a9a7b59d4a26159d8b18d6abe06f60583a19e4208288525c763cf6dd7469e576e3fcd8a724f7108462b88f17c1fcb9e05

  • SSDEEP

    98304:h1fX1YJdXWdlfmkfldqgVMgDnwo+kUNWvI3npO9Dz7vYzLEEvBZ0qwmy7mpmm9mq:h90dXwgSkpWfDz7vYzLEYBZ0qwmy7mp5

Score
10/10
ramnitbankerpersistencespywarestealertrojanupxworm

Malware Config

Targets

    • Target

      NEAS.f9a2d5b77f5185d5f15b53a862145ad0f656fe872273ace0dc9bce7f67d00adf_JC.exe

    • Size

      3.5MB

    • MD5

      b45ec8f7811380b20823afcb743ebd25

    • SHA1

      6d1905f59bf6110a371d7003b8cba47c3b5e8437

    • SHA256

      f9a2d5b77f5185d5f15b53a862145ad0f656fe872273ace0dc9bce7f67d00adf

    • SHA512

      76c63416e92567e7dba2b1565480025a9a7b59d4a26159d8b18d6abe06f60583a19e4208288525c763cf6dd7469e576e3fcd8a724f7108462b88f17c1fcb9e05

    • SSDEEP

      98304:h1fX1YJdXWdlfmkfldqgVMgDnwo+kUNWvI3npO9Dz7vYzLEEvBZ0qwmy7mpmm9mq:h90dXwgSkpWfDz7vYzLEYBZ0qwmy7mp5

    Score
    10/10
    ramnitbankerpersistencespywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks