Overview

overview

10

Static

static

3

886e6222aa...0b.dll

windows7-x64

10

886e6222aa...0b.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    886e6222aab4ce6cb5a9bf349fe0d90b

  • Size

    337KB

  • Sample

    240202-dyzfvsfabm

  • MD5

    886e6222aab4ce6cb5a9bf349fe0d90b

  • SHA1

    5d38260452f69e93549e0c2a848cd03479c1ebef

  • SHA256

    e971f267ce18eaee736d76ea7a543dec746d43a8bc5994ee506867d802f02df0

  • SHA512

    2f24b4d020f7bb7d0872e5432832d88c90ab8ecbc8f61c9666bd9536a10a76336ae79bd315ea03d3bc1ef8e6a89d6b9ce24939e1969d430148f13eba31c1ed24

  • SSDEEP

    6144:mN0yr1sO/wIKS0FKtOT/OrDtgUi0uvQee7Qee/0QeesQeeglQeekQeeDC7Mt7vBM:2G6wndYtamDSU1Cd+

Score
10/10
ramnitbankerpersistencespywarestealertrojanupxworm

Malware Config

Targets

    • Target

      886e6222aab4ce6cb5a9bf349fe0d90b

    • Size

      337KB

    • MD5

      886e6222aab4ce6cb5a9bf349fe0d90b

    • SHA1

      5d38260452f69e93549e0c2a848cd03479c1ebef

    • SHA256

      e971f267ce18eaee736d76ea7a543dec746d43a8bc5994ee506867d802f02df0

    • SHA512

      2f24b4d020f7bb7d0872e5432832d88c90ab8ecbc8f61c9666bd9536a10a76336ae79bd315ea03d3bc1ef8e6a89d6b9ce24939e1969d430148f13eba31c1ed24

    • SSDEEP

      6144:mN0yr1sO/wIKS0FKtOT/OrDtgUi0uvQee7Qee/0QeesQeeglQeekQeeDC7Mt7vBM:2G6wndYtamDSU1Cd+

    Score
    10/10
    ramnitbankerpersistencespywarestealertrojanupxworm

    • Modifies WinLogon for persistence

      persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks