Overview

overview

10

Static

static

3

NEAS.27cd5...JC.dll

windows7-x64

10

NEAS.27cd5...JC.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.27cd591cc2e538f18053ab6212b032d0_JC.exe

  • Size

    284KB

  • Sample

    231105-awpl4agf9s

  • MD5

    27cd591cc2e538f18053ab6212b032d0

  • SHA1

    0c5ebbeccc9a97d637d898c01b7c4f03d109b77a

  • SHA256

    240e9c7baa54bc5f455cbf6f15d0778de4eea1347cd26cfd2df8867e8a5dfbf1

  • SHA512

    d565497636bfeef954ddf8a325526def9ed9f88ba804b996d301e258c040eed6f3a36456d328ab82b4ecafad78f6958a657ecb65987ffc6f1b47e3a16418a92d

  • SSDEEP

    6144:S3+MMHMMMyMMMZMMMVcRMebzDq0DKF/2Ar++X/Ljk8I:Q+MMHMMMyMMMZMMMVcR9bzOco2ArZX/0

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      NEAS.27cd591cc2e538f18053ab6212b032d0_JC.exe

    • Size

      284KB

    • MD5

      27cd591cc2e538f18053ab6212b032d0

    • SHA1

      0c5ebbeccc9a97d637d898c01b7c4f03d109b77a

    • SHA256

      240e9c7baa54bc5f455cbf6f15d0778de4eea1347cd26cfd2df8867e8a5dfbf1

    • SHA512

      d565497636bfeef954ddf8a325526def9ed9f88ba804b996d301e258c040eed6f3a36456d328ab82b4ecafad78f6958a657ecb65987ffc6f1b47e3a16418a92d

    • SSDEEP

      6144:S3+MMHMMMyMMMZMMMVcRMebzDq0DKF/2Ar++X/Ljk8I:Q+MMHMMMyMMMZMMMVcR9bzOco2ArZX/0

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks