General
-
Target
2024-06-30_61a91fd5c7263dee33d275e148c2ac21_magniber_poet-rat_ramnit
-
Size
7.0MB
-
Sample
240630-z8k7wawcjf
-
MD5
61a91fd5c7263dee33d275e148c2ac21
-
SHA1
01b0cd6f83f4dd3e1bfde42b61dd458300deba31
-
SHA256
06c42ae4f07296f930276bcb954c352ea20ec3ddb756accd1c0b7c57ed6af8ed
-
SHA512
6dd1fac095165fada5e007dd919278de31546643cb4e7d9c66f2056cc8fe23a5e140d35d2e17b02ed8b8542ab20c851a13b43bf1fc99017f1b20c9abf7f7618c
-
SSDEEP
98304:nx+y15ZDif5PYXVGx4QjLwAcSjpyZGarJZzDfonvbkZDw3KAGxxmXxZBKFVlX:bbDif5wEx5jBfwGuYUxmxG
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-30_61a91fd5c7263dee33d275e148c2ac21_magniber_poet-rat_ramnit.exe
Resource
win7-20231129-en
Malware Config
Targets
-
-
Target
2024-06-30_61a91fd5c7263dee33d275e148c2ac21_magniber_poet-rat_ramnit
-
Size
7.0MB
-
MD5
61a91fd5c7263dee33d275e148c2ac21
-
SHA1
01b0cd6f83f4dd3e1bfde42b61dd458300deba31
-
SHA256
06c42ae4f07296f930276bcb954c352ea20ec3ddb756accd1c0b7c57ed6af8ed
-
SHA512
6dd1fac095165fada5e007dd919278de31546643cb4e7d9c66f2056cc8fe23a5e140d35d2e17b02ed8b8542ab20c851a13b43bf1fc99017f1b20c9abf7f7618c
-
SSDEEP
98304:nx+y15ZDif5PYXVGx4QjLwAcSjpyZGarJZzDfonvbkZDw3KAGxxmXxZBKFVlX:bbDif5wEx5jBfwGuYUxmxG
-
UPX dump on OEP (original entry point)
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-