General

  • Target

    c9bb6c46b0fe40b6d6508beed4035cbb

  • Size

    95KB

  • Sample

    240314-115rzsgf8z

  • MD5

    c9bb6c46b0fe40b6d6508beed4035cbb

  • SHA1

    af7206bcbed67c069d1fb4c33f927caac70234c7

  • SHA256

    6277ea60a5919ab39362e34035d8fd7a63484480962084d2d345a94a19f9b387

  • SHA512

    3724fc2e64bf69fd22e6123323a0936f57002f4ce0d6f642479539f2ee4b304a88e5c6152b59742150a9512cc34e298e1f35753ad4bc5df17137aa06b81ea521

  • SSDEEP

    768:V06R0UKzOgnKqGR7//GPc0LOBhvBrHks3IiyhDYQbGmxlNaM+WGa1wuxnzgOYw9Y:DR0vxn3Pc0LCH9MtbvabUDzJYWu3B

Malware Config

Targets

    • Target

      c9bb6c46b0fe40b6d6508beed4035cbb

    • Size

      95KB

    • MD5

      c9bb6c46b0fe40b6d6508beed4035cbb

    • SHA1

      af7206bcbed67c069d1fb4c33f927caac70234c7

    • SHA256

      6277ea60a5919ab39362e34035d8fd7a63484480962084d2d345a94a19f9b387

    • SHA512

      3724fc2e64bf69fd22e6123323a0936f57002f4ce0d6f642479539f2ee4b304a88e5c6152b59742150a9512cc34e298e1f35753ad4bc5df17137aa06b81ea521

    • SSDEEP

      768:V06R0UKzOgnKqGR7//GPc0LOBhvBrHks3IiyhDYQbGmxlNaM+WGa1wuxnzgOYw9Y:DR0vxn3Pc0LCH9MtbvabUDzJYWu3B

    • Modifies WinLogon for persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks