General

  • Target

    56995944b1c17583fbdfe309741d72e9cc2bda158147d14ea0db942b428d0fac

  • Size

    1.5MB

  • Sample

    240312-zhebmscf68

  • MD5

    ab84a166f37e0203b649f47558c3222a

  • SHA1

    9569dc852c68058e004daf65e02ba1d93b3e06fc

  • SHA256

    56995944b1c17583fbdfe309741d72e9cc2bda158147d14ea0db942b428d0fac

  • SHA512

    0b6132556400320770731801618df36e5bdab07e0f8e539f13acfcb32e7339dc481d87dcf71309188454f842d4129090ebcdf3bb355452a456c3ae23ab206b60

  • SSDEEP

    49152:BCjpWiW9OqSRbYeSmkod79PEJl/MLDY3g:BCjpWiW9QRbYmhMDUS

Malware Config

Targets

    • Target

      56995944b1c17583fbdfe309741d72e9cc2bda158147d14ea0db942b428d0fac

    • Size

      1.5MB

    • MD5

      ab84a166f37e0203b649f47558c3222a

    • SHA1

      9569dc852c68058e004daf65e02ba1d93b3e06fc

    • SHA256

      56995944b1c17583fbdfe309741d72e9cc2bda158147d14ea0db942b428d0fac

    • SHA512

      0b6132556400320770731801618df36e5bdab07e0f8e539f13acfcb32e7339dc481d87dcf71309188454f842d4129090ebcdf3bb355452a456c3ae23ab206b60

    • SSDEEP

      49152:BCjpWiW9OqSRbYeSmkod79PEJl/MLDY3g:BCjpWiW9QRbYmhMDUS

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks