Overview

overview

10

Static

static

3

3d0a793531...2d.exe

windows7-x64

10

3d0a793531...2d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3d0a7935310b1fde5b39d9e7a7e5652d

  • Size

    68KB

  • Sample

    240101-rb7qlsefh7

  • MD5

    3d0a7935310b1fde5b39d9e7a7e5652d

  • SHA1

    8fdc9d8799b9fca3ed5f2d5d3cf9b0ec7464202f

  • SHA256

    8aa9ab89716f8003ca999456a7784b51f1242273c0faa80cb2e777cd31fc0c91

  • SHA512

    2d5bd67c19c462bc22d2092fe3bf9c45969092e0d41f5bb61fb6e587946bc5537d302926f7f979649cf43e06cc13498dbfaa98f2dc283157172a846cddd8a33d

  • SSDEEP

    1536:v8kwilTEhU4HDa1KkjWXUa21mc/Mue9KOq:3hlohUEK9ekpgq

Score
10/10
ramnitbankerpersistencespywarestealertrojanupxworm

Malware Config

Targets

    • Target

      3d0a7935310b1fde5b39d9e7a7e5652d

    • Size

      68KB

    • MD5

      3d0a7935310b1fde5b39d9e7a7e5652d

    • SHA1

      8fdc9d8799b9fca3ed5f2d5d3cf9b0ec7464202f

    • SHA256

      8aa9ab89716f8003ca999456a7784b51f1242273c0faa80cb2e777cd31fc0c91

    • SHA512

      2d5bd67c19c462bc22d2092fe3bf9c45969092e0d41f5bb61fb6e587946bc5537d302926f7f979649cf43e06cc13498dbfaa98f2dc283157172a846cddd8a33d

    • SSDEEP

      1536:v8kwilTEhU4HDa1KkjWXUa21mc/Mue9KOq:3hlohUEK9ekpgq

    Score
    10/10
    ramnitbankerpersistencespywarestealertrojanupxworm

    • Modifies WinLogon for persistence

      persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks