Overview

overview

10

Static

static

3

2024-04-23...it.exe

windows7-x64

10

2024-04-23...it.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-23_e1916b3e4acbc187d94b77d3b6588ab2_icedid_ramnit

  • Size

    440KB

  • Sample

    240423-ejd22scg31

  • MD5

    e1916b3e4acbc187d94b77d3b6588ab2

  • SHA1

    b93aa16ed3ef0eef7e792d91c9c168f450c0baa1

  • SHA256

    632d7882ed0bf19750f83f456ec433e9a3d08206ef945b620443b0139457283b

  • SHA512

    32bacb35be1efed3a13cef55edaece16e4a34f9af620a3c6ac980cdf1771be6926b838a2af84c693ac988f8cc62f3fb52d00bafdb127d9e54bf2170a43514e67

  • SSDEEP

    6144:3jp5YSEc94njO7PeOGM10S/DUv1RyrdZmQOBOZK+WIdi5L9RpP:zeO7P6SdrrdZgBO8+FdSL9RF

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      2024-04-23_e1916b3e4acbc187d94b77d3b6588ab2_icedid_ramnit

    • Size

      440KB

    • MD5

      e1916b3e4acbc187d94b77d3b6588ab2

    • SHA1

      b93aa16ed3ef0eef7e792d91c9c168f450c0baa1

    • SHA256

      632d7882ed0bf19750f83f456ec433e9a3d08206ef945b620443b0139457283b

    • SHA512

      32bacb35be1efed3a13cef55edaece16e4a34f9af620a3c6ac980cdf1771be6926b838a2af84c693ac988f8cc62f3fb52d00bafdb127d9e54bf2170a43514e67

    • SSDEEP

      6144:3jp5YSEc94njO7PeOGM10S/DUv1RyrdZmQOBOZK+WIdi5L9RpP:zeO7P6SdrrdZgBO8+FdSL9RF

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks