General

  • Target

    8342585e9eee1b1911992068dfa8f5dd1b9e1548f1f81d726ddb5f1442b5009dN.exe

  • Size

    947KB

  • Sample

    241217-h2wxcsvldp

  • MD5

    b8cf1b97212eab07ad9d97f6771bf6e0

  • SHA1

    3da088e4ca06a1e54ca4dc36a2c47810169af877

  • SHA256

    8342585e9eee1b1911992068dfa8f5dd1b9e1548f1f81d726ddb5f1442b5009d

  • SHA512

    4ca204cba05f596b83c897cd4499b50c1bfb8c290d5d3e15edde972d77e0acd8ebca89c3468791e9892c5c0979b2d71754798628fd3dc6a4616d50d39bafab3b

  • SSDEEP

    24576:pzb1MlCKUQyUmjtczu6Prs9pgWoopooK9kwP+PmS4+xXGeBD+VF3D:pzbKsUmjtcdPGgIwP+PmSdF+P

Malware Config

Targets

    • Target

      8342585e9eee1b1911992068dfa8f5dd1b9e1548f1f81d726ddb5f1442b5009dN.exe

    • Size

      947KB

    • MD5

      b8cf1b97212eab07ad9d97f6771bf6e0

    • SHA1

      3da088e4ca06a1e54ca4dc36a2c47810169af877

    • SHA256

      8342585e9eee1b1911992068dfa8f5dd1b9e1548f1f81d726ddb5f1442b5009d

    • SHA512

      4ca204cba05f596b83c897cd4499b50c1bfb8c290d5d3e15edde972d77e0acd8ebca89c3468791e9892c5c0979b2d71754798628fd3dc6a4616d50d39bafab3b

    • SSDEEP

      24576:pzb1MlCKUQyUmjtczu6Prs9pgWoopooK9kwP+PmS4+xXGeBD+VF3D:pzbKsUmjtcdPGgIwP+PmSdF+P

    • Modifies WinLogon for persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Ramnit family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks