Overview

overview

10

Static

static

3

27bc5207b6...4e.dll

windows7-x64

10

27bc5207b6...4e.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    27bc5207b64373502bffdb5b34e84851fb7d48ddb49d9a4853b981c12632884e

  • Size

    2.2MB

  • Sample

    241119-tezkhsxhkh

  • MD5

    b8865c5a389fe563464f96f75aaa107f

  • SHA1

    7f2cec288ab357e16d35423d3bb8177667c61def

  • SHA256

    27bc5207b64373502bffdb5b34e84851fb7d48ddb49d9a4853b981c12632884e

  • SHA512

    172f8d5a65573bed3dc416a4369f35fbb8635877ff4b8dc7b6e81395b565c842fcafe7db26a070c3e46e6b62bed632e85a6d3e428be4cfc052259d224329c568

  • SSDEEP

    49152:aS+zZNe7OtcTJikh6iosngNd+3MXvpwksUiZ8V9iJXDjJgSw:ENe7VTIC6iosngNd+3MXakq8V9iJXDj

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      27bc5207b64373502bffdb5b34e84851fb7d48ddb49d9a4853b981c12632884e

    • Size

      2.2MB

    • MD5

      b8865c5a389fe563464f96f75aaa107f

    • SHA1

      7f2cec288ab357e16d35423d3bb8177667c61def

    • SHA256

      27bc5207b64373502bffdb5b34e84851fb7d48ddb49d9a4853b981c12632884e

    • SHA512

      172f8d5a65573bed3dc416a4369f35fbb8635877ff4b8dc7b6e81395b565c842fcafe7db26a070c3e46e6b62bed632e85a6d3e428be4cfc052259d224329c568

    • SSDEEP

      49152:aS+zZNe7OtcTJikh6iosngNd+3MXvpwksUiZ8V9iJXDjJgSw:ENe7VTIC6iosngNd+3MXakq8V9iJXDj

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks