Overview

overview

10

Static

static

3

NEAS.fba67...JC.dll

windows7-x64

10

NEAS.fba67...JC.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.fba674d100ce6ffd91932d5612485210_JC.exe

  • Size

    256KB

  • Sample

    231104-lzdjsafc4z

  • MD5

    fba674d100ce6ffd91932d5612485210

  • SHA1

    64dd04d20ebf5304b433dbcef43dbe6c2e6ea789

  • SHA256

    d14bd5db4500bc271fc04dfcf1b9a75a32ac6f3cd6ad4b05b5b15f31deae3dc5

  • SHA512

    e2bb5c35c718f53fbbe5a4e66f26bc2b015f7cd8c6d2bc3cb4bb90152a744f112883ce3db2e2722d512af796df6b5728a93f122de10f5d791c16f520a7aad026

  • SSDEEP

    3072:JLhzauwH1EUmmxboFctEDAeFaTc8P+ZWBC5/O/J20Br4FPjbRQ:jalnBRK6c5g/J21bi

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      NEAS.fba674d100ce6ffd91932d5612485210_JC.exe

    • Size

      256KB

    • MD5

      fba674d100ce6ffd91932d5612485210

    • SHA1

      64dd04d20ebf5304b433dbcef43dbe6c2e6ea789

    • SHA256

      d14bd5db4500bc271fc04dfcf1b9a75a32ac6f3cd6ad4b05b5b15f31deae3dc5

    • SHA512

      e2bb5c35c718f53fbbe5a4e66f26bc2b015f7cd8c6d2bc3cb4bb90152a744f112883ce3db2e2722d512af796df6b5728a93f122de10f5d791c16f520a7aad026

    • SSDEEP

      3072:JLhzauwH1EUmmxboFctEDAeFaTc8P+ZWBC5/O/J20Br4FPjbRQ:jalnBRK6c5g/J21bi

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks