Analysis
-
max time kernel
119s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
25/12/2023, 11:36
General
-
Target
1b4b0aa9ffe391ce1f0602ce7a9f5ac4.exe
-
Size
105KB
-
MD5
1b4b0aa9ffe391ce1f0602ce7a9f5ac4
-
SHA1
adcfc7a487c3f94f7f6f9f4868a356ff421e4aff
-
SHA256
27b11bdfd932f227da05d78c1f77ee5f4f493f93c1c031236483f440fc8c8a29
-
SHA512
3022589001293cfc4b80584f0d6e029170d99a1968ce34c4017b5760762c93ce7a392e7713d982c3eb60e78a21779b7b99233c0c981bee2ae3249bc24020d915
-
SSDEEP
1536:1zZZpp48Zd0lo+4EMMyO3OexOSEowTwBjzvcmJoxDWqfqNII2Ca2:tZSlI/HUOjSiToj7CEqfqg2
Malware Config
Signatures
-
Ramnit
Ramnit is a versatile family that holds viruses, worms, and Trojans.
-
Loads dropped DLL 2 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1b4b0aa9ffe391ce1f0602ce7a9f5ac4.exe"C:\Users\Admin\AppData\Local\Temp\1b4b0aa9ffe391ce1f0602ce7a9f5ac4.exe"1⤵
- Loads dropped DLL
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.0MB
MD5f053040bb6215c3046dc1201bbe2bf93
SHA1d026d3e44eab4c0548163c759ab61bef0ee67378
SHA25689c4fb404dce26abca72ec82af5ab67d03dd356369aa0116dc028857a7ac9434
SHA512b7a84015a2dde9190a616f04d718e081e766fad7ee12d48061af95ead13fa3b457eed7e1957247dda78190d312595bbd0f57b89a040eb6deef255a85fff2cf58
-
Filesize
466KB
MD56e8b30833e340db70f0f57f4cc61b449
SHA1a039f641abef2f6beafc5627f006e895b0de2bb4
SHA256cb23fe1978c91b5ac4e9238ef4e4c74013e4fbebe9b0705d234b1679871ac8ec
SHA512fbcfe07f19ccbe4a1f7f0e2da19dd86e7a2f96ac09a4237f7a5ad844b98a0c74404c6e78a2f878f37d7886ac7711b5acfdab555f044bda9658d433ddb4eea204
-
Filesize
312KB
-
Filesize
312KB
-
Filesize
312KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
312KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB