Overview

overview

10

Static

static

3

shakedown.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    shakedown.exe

  • Size

    163KB

  • Sample

    250111-ybyk9szkfn

  • MD5

    27d06a1dfc94073b72e19979b08a7b3f

  • SHA1

    197579c745b81d1ffc7ea79269fd630eebcb7ead

  • SHA256

    ddcd0e5afed1b0be5531e2836965a458144cab385250435471710c0e2d463f59

  • SHA512

    6995dd0c1d45a7255699cddffe1bc888ad39aa6c8a791ea35ca3653701ee521ffbc54319775d316ce60e4740220fa7abfc64e93d15950d6018bc3b6757491443

  • SSDEEP

    3072:PnZH8OfUKhCqqfTlScqBEbAFTm6e8VqpqWqikc+RWqAkX8Q8QjumDdjJGCAYXvxO:/ZhUKhJqfTlxCpB1ap8TBxA68Qjumxs+

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      shakedown.exe

    • Size

      163KB

    • MD5

      27d06a1dfc94073b72e19979b08a7b3f

    • SHA1

      197579c745b81d1ffc7ea79269fd630eebcb7ead

    • SHA256

      ddcd0e5afed1b0be5531e2836965a458144cab385250435471710c0e2d463f59

    • SHA512

      6995dd0c1d45a7255699cddffe1bc888ad39aa6c8a791ea35ca3653701ee521ffbc54319775d316ce60e4740220fa7abfc64e93d15950d6018bc3b6757491443

    • SSDEEP

      3072:PnZH8OfUKhCqqfTlScqBEbAFTm6e8VqpqWqikc+RWqAkX8Q8QjumDdjJGCAYXvxO:/ZhUKhJqfTlxCpB1ap8TBxA68Qjumxs+

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks