Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
24/12/2023, 16:32
General
-
Target
05e74b1ee332424f67dae12c9ecdf15c.exe
-
Size
94KB
-
MD5
05e74b1ee332424f67dae12c9ecdf15c
-
SHA1
d041f7aef49b9390e9402d13c00f751c0082a8c3
-
SHA256
e532b5031f3b58e6f3ae2b2425fbdf437682237c4c0b49fbac6b91cf8d85056c
-
SHA512
74559cb2b81007b54490c9a72f202f0f28e6bcc37d141d031a6e4c33e2ca4c6d5830e62c599464f470b6541b7d5e4d8befaed76026c7e9c3a9bd1421d04f0286
-
SSDEEP
768:8EzQE2+b7B1T4t7vI2NiN+U4ZmTX7CaKf+ibj55VTQ1RBkMoas0Qz3FGnuYoEq:8235b7vkmVN+1e3c+ibV561RBhoB1Eq
Malware Config
Signatures
-
Ramnit
Ramnit is a versatile family that holds viruses, worms, and Trojans.
-
Loads dropped DLL 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\05e74b1ee332424f67dae12c9ecdf15c.exe"C:\Users\Admin\AppData\Local\Temp\05e74b1ee332424f67dae12c9ecdf15c.exe"1⤵
- Loads dropped DLL
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4068 -s 2802⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4068 -ip 40681⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
389KB
MD5c6aac260c366471eb910150832fd724d
SHA18ef506749168e7d093d93921620f08f2e4fcda4c
SHA256a7f62e2a89e7f0f0b92f0809e11e0b0a0a57a1598b9db9eacf86c063c50a0e27
SHA5121873d70f10ea359d8a978107321bfa4c44ad0695a137b8e8113c3dab8549c050f237a2aa8f4cdd5f3a9557261da0e82c932cc16b7c5cbf7898a632468e1832dc
-
Filesize
220KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
220KB
-
Filesize
220KB