Overview

overview

10

Static

static

1

215c30bc3e...b.html

windows7-x64

10

215c30bc3e...b.html

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    215c30bc3efb605c8e4aee880c18267b

  • Size

    185KB

  • Sample

    231231-akrbjsedf2

  • MD5

    215c30bc3efb605c8e4aee880c18267b

  • SHA1

    1caad7bfb3e0bdf817b3a3e8c526c160893ed854

  • SHA256

    89d7f8cba1bb093e256cd91ed8b4fa6eb720d913309a7a2196524e8091b1625d

  • SHA512

    662e0190dbcf1170090e982da3371636fb2882df2867fbc4f9023d9e5f8f974bae398f08fda2c279379958c9d81e9b5948c6bdf6999714cb67446c9a1233ae5f

  • SSDEEP

    3072:tyfkMY+BES09JXAnyrZalI+Y6XXI6EyA8:4sMYod+X3oI+YS1tA8

Score
10/10
ramnitbankerevasionspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      215c30bc3efb605c8e4aee880c18267b

    • Size

      185KB

    • MD5

      215c30bc3efb605c8e4aee880c18267b

    • SHA1

      1caad7bfb3e0bdf817b3a3e8c526c160893ed854

    • SHA256

      89d7f8cba1bb093e256cd91ed8b4fa6eb720d913309a7a2196524e8091b1625d

    • SHA512

      662e0190dbcf1170090e982da3371636fb2882df2867fbc4f9023d9e5f8f974bae398f08fda2c279379958c9d81e9b5948c6bdf6999714cb67446c9a1233ae5f

    • SSDEEP

      3072:tyfkMY+BES09JXAnyrZalI+Y6XXI6EyA8:4sMYod+X3oI+YS1tA8

    Score
    10/10
    ramnitbankerspywarestealertrojanupxwormevasion

    • Modifies firewall policy service

      evasion

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks