Extracted

• • Target

    gladiator.exe

  • Size

    247KB

  • MD5

    a3d1897a5a519267b7f123eef9de0947

  • SHA1

    797c9c1c18465749f1436119edbd5997efe5e301

  • SHA256

    7953e42f63dc02aa5e9af2565ad8b42db651c10e9b565c000f1f6df5ce18bc3d

  • SHA512

    b890128b11a3ba459af3b3eaa6dee57d590b8ce4cdf188383d04b3c25d097f7e43d248d38f9b9e1a7d7bc181741e9da2ca64a90ea47283a47fac11ad10d183c9

  • SSDEEP

    6144:Bz+92mhAMJ/cPl3i8/5ctbOkN4s2Ks1JShvZsB6GgZpQo5HP8sb:BK2mhAMJ/cPlJWtqkv2kBZvGmpZvtb

  Score

  10^/10

  latentbotramnitbankerdiscoveryspywarestealertrojanupxworm

  • LatentBot

    Modular trojan written in Delphi which has been in-the-wild since 2013.

    trojanlatentbot

  • Latentbot family

    latentbot

  • Ramnit

    Ramnit is a versatile family that holds viruses, worms, and Trojans.

    trojanspywarestealerwormbankerramnit

  • Ramnit family

    ramnit

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2