General

  • Target

    ca7442a1cd93d84014f0acbf1df47d4f

  • Size

    115KB

  • Sample

    240315-er56haaa68

  • MD5

    ca7442a1cd93d84014f0acbf1df47d4f

  • SHA1

    71bc743cf067ccbe4c06f0da021e85e66082b8d3

  • SHA256

    78567e920cd1e99b1ea2b4563305bf673d52f50a38301361ce3eb501c31ce474

  • SHA512

    cf743481e67d70f92d15310591a0d28f398185352c8f7e64c470553318bf9a86cbaf897f9494fa672f9ab10f84d98d67500ede69916c91ec803bc9b65106b991

  • SSDEEP

    768:o06R0Ub+gnKqGR7//GPc0LOBhvBrHks3IiyhDYQbGmxlNaM+WGa1wuxnzgOYw9I/:mR049n3Pc0LCH9MtbvabUDzJYWu3B

Malware Config

Targets

    • Target

      ca7442a1cd93d84014f0acbf1df47d4f

    • Size

      115KB

    • MD5

      ca7442a1cd93d84014f0acbf1df47d4f

    • SHA1

      71bc743cf067ccbe4c06f0da021e85e66082b8d3

    • SHA256

      78567e920cd1e99b1ea2b4563305bf673d52f50a38301361ce3eb501c31ce474

    • SHA512

      cf743481e67d70f92d15310591a0d28f398185352c8f7e64c470553318bf9a86cbaf897f9494fa672f9ab10f84d98d67500ede69916c91ec803bc9b65106b991

    • SSDEEP

      768:o06R0Ub+gnKqGR7//GPc0LOBhvBrHks3IiyhDYQbGmxlNaM+WGa1wuxnzgOYw9I/:mR049n3Pc0LCH9MtbvabUDzJYWu3B

    • Modifies WinLogon for persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks