Overview

overview

10

Static

static

3

2023-08-26...JC.exe

windows7-x64

10

2023-08-26...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2023-08-26_5dfc010c77967e3d5064ea34fddc0a3b_mafia_ramnit_JC.exe

  • Size

    1.8MB

  • Sample

    231011-wbnd7aec38

  • MD5

    5dfc010c77967e3d5064ea34fddc0a3b

  • SHA1

    a9f1fc8c27e01f860ac0808bf67c6702294f3f3a

  • SHA256

    68da719a8bce0a269fdb98d6719fc5444225a686bc86423f8887ca2a1daea378

  • SHA512

    b2760c36d45b6c8f98e93cc1b745a66dd1fe85157a78cdad8ffd69818ebfacdda4fa8e1449b7fd854a7fbdf7e49d2e4dc0a2bcbd349f23bef66e97ea86b8c8b2

  • SSDEEP

    49152:APSdG9Ws3y5F1p0xrxOlU9E+mwqnaOW1PEWxKih0EtUKOMifzKJofjvy7mpmm9m:OSuWs3y5zp0xrMU9EmqnaOW1PEWxKOfC

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      2023-08-26_5dfc010c77967e3d5064ea34fddc0a3b_mafia_ramnit_JC.exe

    • Size

      1.8MB

    • MD5

      5dfc010c77967e3d5064ea34fddc0a3b

    • SHA1

      a9f1fc8c27e01f860ac0808bf67c6702294f3f3a

    • SHA256

      68da719a8bce0a269fdb98d6719fc5444225a686bc86423f8887ca2a1daea378

    • SHA512

      b2760c36d45b6c8f98e93cc1b745a66dd1fe85157a78cdad8ffd69818ebfacdda4fa8e1449b7fd854a7fbdf7e49d2e4dc0a2bcbd349f23bef66e97ea86b8c8b2

    • SSDEEP

      49152:APSdG9Ws3y5F1p0xrxOlU9E+mwqnaOW1PEWxKih0EtUKOMifzKJofjvy7mpmm9m:OSuWs3y5zp0xrMU9EmqnaOW1PEWxKOfC

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks