General

  • Target

    cbfdae7fe306137ec5b180a3f1cfbd40

  • Size

    120KB

  • Sample

    240315-vzf5caeb2x

  • MD5

    cbfdae7fe306137ec5b180a3f1cfbd40

  • SHA1

    52aa114df59c5acf175381e50d18cf53f1dd1334

  • SHA256

    1d8086cbd134f292febdf6bfa05b5de9ee836e9b806e088ff4f164d580d0c5b8

  • SHA512

    13587853c4a6507726220b0a2f2209393c16b6124b306448f605b0b647548608f7794eae8c6cde4c5b80e1e7f33c87dbf38c5b116bb12c49aef71e9f1a2be52d

  • SSDEEP

    768:8QxkwieBsIqHpcrkMEYEhA7P4RhAtmaZFb79U9MKAjBEig6/1k21m3uHRdMNDj2Y:88kwiYTEhU4HDa1KkjWXUa21mc/Mue9

Malware Config

Targets

    • Target

      cbfdae7fe306137ec5b180a3f1cfbd40

    • Size

      120KB

    • MD5

      cbfdae7fe306137ec5b180a3f1cfbd40

    • SHA1

      52aa114df59c5acf175381e50d18cf53f1dd1334

    • SHA256

      1d8086cbd134f292febdf6bfa05b5de9ee836e9b806e088ff4f164d580d0c5b8

    • SHA512

      13587853c4a6507726220b0a2f2209393c16b6124b306448f605b0b647548608f7794eae8c6cde4c5b80e1e7f33c87dbf38c5b116bb12c49aef71e9f1a2be52d

    • SSDEEP

      768:8QxkwieBsIqHpcrkMEYEhA7P4RhAtmaZFb79U9MKAjBEig6/1k21m3uHRdMNDj2Y:88kwiYTEhU4HDa1KkjWXUa21mc/Mue9

    • Modifies WinLogon for persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks