General

  • Target

    ccb267dd586b86679850c1e1b1a901764d21038cbb00f5eb3c65e994dc881541

  • Size

    461KB

  • Sample

    240524-n49h5ahb85

  • MD5

    6d9c4b46f5fc3e58dcc82054b78a4ebf

  • SHA1

    4b5bc855c3f89f30e5f96b95840f32066d3c3c1d

  • SHA256

    ccb267dd586b86679850c1e1b1a901764d21038cbb00f5eb3c65e994dc881541

  • SHA512

    95efe9f038e1cead0e50f9ab12289860147c0c6433f18ea6881b4d4f1dee2853f5ba6a7fba2cae644722ecb7cb72cb37ea8f7e01e647c3cab3d1cb714a0d411e

  • SSDEEP

    6144:SeZsMYod+X3oI+Y3klUNsMYod+X3oI+Y4sMYod+X3oI+YGsMYod+X3oI+YQ:hl5d+X3v5d+X3I5d+X3i5d+X3+

Malware Config

Targets

    • Target

      ccb267dd586b86679850c1e1b1a901764d21038cbb00f5eb3c65e994dc881541

    • Size

      461KB

    • MD5

      6d9c4b46f5fc3e58dcc82054b78a4ebf

    • SHA1

      4b5bc855c3f89f30e5f96b95840f32066d3c3c1d

    • SHA256

      ccb267dd586b86679850c1e1b1a901764d21038cbb00f5eb3c65e994dc881541

    • SHA512

      95efe9f038e1cead0e50f9ab12289860147c0c6433f18ea6881b4d4f1dee2853f5ba6a7fba2cae644722ecb7cb72cb37ea8f7e01e647c3cab3d1cb714a0d411e

    • SSDEEP

      6144:SeZsMYod+X3oI+Y3klUNsMYod+X3oI+Y4sMYod+X3oI+YGsMYod+X3oI+YQ:hl5d+X3v5d+X3I5d+X3i5d+X3+

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Tasks