Overview

overview

10

Static

static

3

2024-04-23...it.exe

windows7-x64

10

2024-04-23...it.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-23_da7241320aad0f24bfcab19397461fb3_icedid_ramnit

  • Size

    285KB

  • Sample

    240423-flpf8sdd47

  • MD5

    da7241320aad0f24bfcab19397461fb3

  • SHA1

    e2840090155bd8f05e66b543712f75aa5ad07271

  • SHA256

    5864ae17a5c3351a61dcae57a7f76f0d46f12ed414215a3d6e439e7d8c8104b9

  • SHA512

    5b0af6f173dbcb9861e509d34abb009b03b56c57ed9dcde4ee34e6c5212fb4a972081bbe0a372a794e04de683bcfc536fab0857e2c710690368192e7ca1881e0

  • SSDEEP

    6144:S2A775DZq2GWgX+AtA9dSyz0mvsx+N0r/+DSl55:O5DqXL0z0mve+DSP

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      2024-04-23_da7241320aad0f24bfcab19397461fb3_icedid_ramnit

    • Size

      285KB

    • MD5

      da7241320aad0f24bfcab19397461fb3

    • SHA1

      e2840090155bd8f05e66b543712f75aa5ad07271

    • SHA256

      5864ae17a5c3351a61dcae57a7f76f0d46f12ed414215a3d6e439e7d8c8104b9

    • SHA512

      5b0af6f173dbcb9861e509d34abb009b03b56c57ed9dcde4ee34e6c5212fb4a972081bbe0a372a794e04de683bcfc536fab0857e2c710690368192e7ca1881e0

    • SSDEEP

      6144:S2A775DZq2GWgX+AtA9dSyz0mvsx+N0r/+DSl55:O5DqXL0z0mve+DSP

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks