General

  • Target

    850a3a8a0734f46db7cdb35302d46187c7cfd50d7d0e462379659bd273c248c6

  • Size

    833KB

  • Sample

    240615-3n195szcnh

  • MD5

    c2696b4114587ab5d3a8f1f39ff60240

  • SHA1

    9743884e92b78f1ecc9f9c5ad912fca3a4e78f05

  • SHA256

    850a3a8a0734f46db7cdb35302d46187c7cfd50d7d0e462379659bd273c248c6

  • SHA512

    09aeb70427cd9e71cfd8f623324087ccb6bf4114c25f13c9874b7cb0c75875e2b167a2d8e3579a831a4ed86ac0013ee1ff4195d34ed915057c9cb77252b51065

  • SSDEEP

    24576:Yzb1MlCKUQyUmjtczu6Prs9pgWoopooK9kwP5HXpfj+zz:YzbKsUmjtcdPGgIwP53pfizz

Malware Config

Targets

    • Target

      850a3a8a0734f46db7cdb35302d46187c7cfd50d7d0e462379659bd273c248c6

    • Size

      833KB

    • MD5

      c2696b4114587ab5d3a8f1f39ff60240

    • SHA1

      9743884e92b78f1ecc9f9c5ad912fca3a4e78f05

    • SHA256

      850a3a8a0734f46db7cdb35302d46187c7cfd50d7d0e462379659bd273c248c6

    • SHA512

      09aeb70427cd9e71cfd8f623324087ccb6bf4114c25f13c9874b7cb0c75875e2b167a2d8e3579a831a4ed86ac0013ee1ff4195d34ed915057c9cb77252b51065

    • SSDEEP

      24576:Yzb1MlCKUQyUmjtczu6Prs9pgWoopooK9kwP5HXpfj+zz:YzbKsUmjtcdPGgIwP53pfizz

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks