Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25/12/2023, 03:52
General
-
Target
03fe9b94179f300ef35172baad5f73cd.exe
-
Size
158KB
-
MD5
03fe9b94179f300ef35172baad5f73cd
-
SHA1
bdd4c3c37e69a5fcd2982729f1270c2727c23b0c
-
SHA256
57d159ecc2f993e51d3125f22d380d3bb30a08a15731c2c4bf6373f1ad9bf7bd
-
SHA512
fa96c34d4df4820eda677430e9caee199b03339da0e9e6ec5f8ce10b8fb620bb20870fefcfd5081a708ea9823b39bb7037e8bc3349123c4b1ed0f21bf12bdac5
-
SSDEEP
1536:55ZZnAEjEIZvumULmj4wrraK5dZ4Ltta9Km/ec3DtAL6bmZ4bXSjrAE+fySPoqRG:PnnAQVG/LytaKItS/fiLKS+f5Aq7ip
Malware Config
Signatures
-
Ramnit
Ramnit is a versatile family that holds viruses, worms, and Trojans.
-
Loads dropped DLL 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\03fe9b94179f300ef35172baad5f73cd.exe"C:\Users\Admin\AppData\Local\Temp\03fe9b94179f300ef35172baad5f73cd.exe"1⤵
- Loads dropped DLL
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2844 -s 4802⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2844 -ip 28441⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
223KB
MD57800a040dee787a6142204d27e53a4ec
SHA1e27487e72143565e19257caf2b54570ca195991d
SHA25643b0db52a3b74534bcce9b16e5be6a5cd86fcb8638b1b3029f37b00456aa97c1
SHA5122be81e7d4a2ff008444a16afb78dc293b50e7d1a22a4da8736f4769c827e3d8b9b1c5b57e58ba48b616229c3d63b582f02a1dc7fb77cf3cf1e7f208304ea17b0
-
Filesize
200KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
200KB
-
Filesize
200KB