Overview

overview

10

Static

static

10

3b2d32414f...5f.exe

windows7-x64

10

3b2d32414f...5f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b2d32414f35a04a86717b0945cb32155a130b925f0d5b07094ba49c1eecfc5f

  • Size

    184KB

  • Sample

    240529-zchf4shg87

  • MD5

    d71c6a60d463b292484683bf8bd01ab6

  • SHA1

    74feddc83d3b88d00eb06ab81a67070d287b2d20

  • SHA256

    3b2d32414f35a04a86717b0945cb32155a130b925f0d5b07094ba49c1eecfc5f

  • SHA512

    00376b5c064eea8fee5d5b4cefede647e618f55b02a6397e1aec0da59def11abde720d0a2ac62db5dd8fe7ba70aacad47b7b22e6ec35daf03caf0ca5ceb7ed09

  • SSDEEP

    3072:IjnAMMbIWiyr7pjvTooBFEbWwIUclTBft3+oTaxmqq:mAMCIWiyr7JHn17lTBl3+o2xBq

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      3b2d32414f35a04a86717b0945cb32155a130b925f0d5b07094ba49c1eecfc5f

    • Size

      184KB

    • MD5

      d71c6a60d463b292484683bf8bd01ab6

    • SHA1

      74feddc83d3b88d00eb06ab81a67070d287b2d20

    • SHA256

      3b2d32414f35a04a86717b0945cb32155a130b925f0d5b07094ba49c1eecfc5f

    • SHA512

      00376b5c064eea8fee5d5b4cefede647e618f55b02a6397e1aec0da59def11abde720d0a2ac62db5dd8fe7ba70aacad47b7b22e6ec35daf03caf0ca5ceb7ed09

    • SSDEEP

      3072:IjnAMMbIWiyr7pjvTooBFEbWwIUclTBft3+oTaxmqq:mAMCIWiyr7JHn17lTBl3+o2xBq

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • UPX dump on OEP (original entry point)

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks