General

  • Target

    c2faaeadc037d6bd75ccd5f911d22f59

  • Size

    128KB

  • Sample

    240312-k1j8aadb8x

  • MD5

    c2faaeadc037d6bd75ccd5f911d22f59

  • SHA1

    56f2ac8d82c2b83dd91bc97df2115704af33065b

  • SHA256

    a62cfac1e687973567c21846254b36bd2b55169c91c37655da52567186b1dc42

  • SHA512

    67e98c440ff59188780b0d1ab448d612c104efa5f4342f84c8133281c18731ee643e8bd16ed4ccc4be4fe9a3df52813fbe22349ed2099789eeb5d43a5ae5d79f

  • SSDEEP

    3072:qkblbLdo0DH+fKdp5Hy6a0z6q5WfRotW:bbLdo0DH+idp5S6a0OrfQW

Malware Config

Targets

    • Target

      c2faaeadc037d6bd75ccd5f911d22f59

    • Size

      128KB

    • MD5

      c2faaeadc037d6bd75ccd5f911d22f59

    • SHA1

      56f2ac8d82c2b83dd91bc97df2115704af33065b

    • SHA256

      a62cfac1e687973567c21846254b36bd2b55169c91c37655da52567186b1dc42

    • SHA512

      67e98c440ff59188780b0d1ab448d612c104efa5f4342f84c8133281c18731ee643e8bd16ed4ccc4be4fe9a3df52813fbe22349ed2099789eeb5d43a5ae5d79f

    • SSDEEP

      3072:qkblbLdo0DH+fKdp5Hy6a0z6q5WfRotW:bbLdo0DH+idp5S6a0OrfQW

    • Modifies firewall policy service

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Drops file in Drivers directory

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks