Overview

overview

10

Static

static

3

snxdx/snxd...PI.dll

windows7-x64

10

snxdx/snxd...PI.dll

windows10-2004-x64

7

snxdx/snxd...er.dll

windows7-x64

1

snxdx/snxd...er.dll

windows10-2004-x64

3

snxdx/snxdx/dc.dll

windows7-x64

3

snxdx/snxdx/dc.dll

windows10-2004-x64

3

snxdx/snxd...20.dll

windows7-x64

3

snxdx/snxd...20.dll

windows10-2004-x64

3

snxdx/snxd...��.url

windows7-x64

1

snxdx/snxd...��.url

windows10-2004-x64

1

snxdx/snxd...��.exe

windows7-x64

1

snxdx/snxd...��.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aab5e41abd818d86a913bfbf61ce0e02

  • Size

    1.3MB

  • Sample

    240228-cdxabsgf87

  • MD5

    aab5e41abd818d86a913bfbf61ce0e02

  • SHA1

    ea76a50de40dcafbd622985874e23d01d147f164

  • SHA256

    fdf992cbc82531ce80c29e74897ed6e26dcac9ec1217264dbaee0ddbd69acf06

  • SHA512

    16ca58dfe9a790bb53d948ef1cde8fce525c6c95ae8f413180f9c4579751c749eca1ec7ec4e1feeace365083594944b82aa29421065154a060ea0b7338984026

  • SSDEEP

    24576:2xzlHpwhEfpUsNnqxIjXNx05x2EJOjkLwxvX/eSgOm8w2+8e78pmlp:ozNpdmMqONxsx2aOj8z3Kyp

Score
10/10
ramnitbankerbootkitpersistencespywarestealertrojanupxworm

Malware Config

Targets

    • Target

      snxdx/snxdx/CrackCaptchaAPI.dll

    • Size

      1.4MB

    • MD5

      803ff1fcf41f190b29838246f6f7615c

    • SHA1

      3256620504b7694a98e65c8bb8bad6550035ba66

    • SHA256

      79e965deb85ecd372dbbb5fd9c77867bcb4d5ad6e0c124ccc3ee51358305214d

    • SHA512

      e18b8af2cc617558d248db9d33cd6f10ba27bff9a6dd3ae08acfff21e9f1e7e7966a078c56e939c13e79c7621e37ab1502a73b1292b040133008313d2e19b216

    • SSDEEP

      24576:Rn6WrvFhoN0oXr2HbAR4rMuwKc3QC5fexfduH2FRNEpzvKdYr2TB3AEZ8:RPNet4PWQC5yluHQuzQYSTF3Z

    Score
    10/10
    ramnitbankerbootkitpersistencespywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      snxdx/snxdx/UUWiseHelper.dll

    • Size

      228KB

    • MD5

      7c0415db33190179697196004e57d7c4

    • SHA1

      08490854f84d7a8034a6945ff146d4862b15b5a7

    • SHA256

      aa058b89e25c14072acfac4f9159b7d74b20955e3940088e1037d87ca90d9ec1

    • SHA512

      dfd070b4ac5686510251be2564af7cc361246234808b0cb6537ea80e0d3717c061f90c0d4044c7e16d5d875def730ed0ed56ba3d4f7dd580dbdf9e7aab7dd1b7

    • SSDEEP

      6144:e+moNhqzesvTmbGvZQZlRrBKvcWJPFOEy5ka0PiRX:EvpwbrBKvtPnyKqX

    Score
    3/10
    behavioral3behavioral4

    • Target

      snxdx/snxdx/dc.dll

    • Size

      112KB

    • MD5

      3a7c7fb54091111e3ed61720e2c3099e

    • SHA1

      c6bae31d03e2ef65145f7e9cbbcf93213893f49a

    • SHA256

      2de070429883532cc23061bcec1dc2b05c9e57ddec7b28ed14499e8829c9ca8e

    • SHA512

      54739aeb81fdcb0608d6a8579f2fa478d75a1908e2ff115bab91062977470361b142854153970de5333f2f106eb86c07aaeb9956928866aefed41b7c1a803f67

    • SSDEEP

      3072:ykgxWH7IWoOQT5bA2gu4ornmUJYTSmL8/9YmzFh7Xe8AwbcE8+Hwmsw8kG:Wm00weHmsw2

    Score
    3/10
    behavioral5behavioral6

    • Target

      snxdx/snxdx/msvcr120.dll

    • Size

      948KB

    • MD5

      034ccadc1c073e4216e9466b720f9849

    • SHA1

      f19e9d8317161edc7d3e963cc0fc46bd5e4a55a1

    • SHA256

      86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f

    • SHA512

      5f11ef92d936669ee834a5cef5c7d0e7703bf05d03dc4f09b9dcfe048d7d5adfaab6a9c7f42e8080a5e9aad44a35f39f3940d5cca20623d9cafe373c635570f7

    • SSDEEP

      12288:LBmFyjLAOQaYkxGXPfY7eiWWcpOKnpTVOIxhK765qlRRb6x4pI23IbJQV:dmFyjLF847eiWWcoGZVOIxh/WxIAIbGV

    Score
    3/10
    behavioral7behavioral8

    • Target

      snxdx/snxdx/绿盟.url

    • Size

      303B

    • MD5

      da4bb6c562e68cb3cf02958378173158

    • SHA1

      ee9e3dae138e40595433746ee10c3d59ebc7a986

    • SHA256

      7cdfddab04b71c62438d47e5d25484a0e905da03842e018e6cbe140aa0fe8a01

    • SHA512

      946a06c80151df4343460334e7c17a09272f021c6ee2b75187e01b599a24b2ffb0eb6260d1fc0383d4d304d65314ff2524fa6b9b5238c9a7e16db0110f3a506c

    Score
    1/10
    behavioral10behavioral9

    • Target

      snxdx/snxdx/苏宁下单侠.exe

    • Size

      74KB

    • MD5

      2eab259424f6d41b2ae46343f34ffb3d

    • SHA1

      2c1b3d849074ec953be2740db933886e4a86d164

    • SHA256

      7f0309078b3bda7137d13984587d28e6a36675a4381039f26c52052bef9c3770

    • SHA512

      6e56eea55b159fe7564d78fd23a9a69787203e4a2b3be001ad5c141633c192ddc2bf536461f34651900fb5fd41b2e75543a0f73cc90e2bc97526d6223fb12343

    • SSDEEP

      1536:BjgwbqoNZcHYsoIz4XMhpCo2aSckFyyC3GwH4gNvzgoIR3f:BgwbZ7cHYsoKWMhpCiSckq3GwHXzp

    Score
    1/10
    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks