ramnit | f3911897d5b6118baa0092f8835b7f5fa522ae94f0f7ba5df19da60969e6c8f4 | Triage

Submit
Reports

Overview

overview

Static

static

f3911897d5...f4.dll

windows7_x64

f3911897d5...f4.dll

windows10_x64

Sharing

General

Target

f3911897d5b6118baa0092f8835b7f5fa522ae94f0f7ba5df19da60969e6c8f4
Size

276KB
Sample

210511-16qc2s8fc2
MD5

29e91f22e61103ee6a2e36a68db97653
SHA1

502e44c9adfa7cba0e6bc02ec309c8ff5e40f886
SHA256

f3911897d5b6118baa0092f8835b7f5fa522ae94f0f7ba5df19da60969e6c8f4
SHA512

f7a0cadb04724a9dfffed682f73f20e8b8f2ae900d29c0fea597063ed9865a00c89e67287fb0eb4067ee226af2660f158a9ace5dad34f6261cf5a8c51cd3c349

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

f3911897d5b6118baa0092f8835b7f5fa522ae94f0f7ba5df19da60969e6c8f4.dll

Resource

win7v20210410

ramnit banker spyware stealer trojan upx worm

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

f3911897d5b6118baa0092f8835b7f5fa522ae94f0f7ba5df19da60969e6c8f4.dll

Resource

win10v20210408

ramnit banker spyware stealer trojan upx worm

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  f3911897d5b6118baa0092f8835b7f5fa522ae94f0f7ba5df19da60969e6c8f4
- Size
  
  276KB
- MD5
  
  29e91f22e61103ee6a2e36a68db97653
- SHA1
  
  502e44c9adfa7cba0e6bc02ec309c8ff5e40f886
- SHA256
  
  f3911897d5b6118baa0092f8835b7f5fa522ae94f0f7ba5df19da60969e6c8f4
- SHA512
  
  f7a0cadb04724a9dfffed682f73f20e8b8f2ae900d29c0fea597063ed9865a00c89e67287fb0eb4067ee226af2660f158a9ace5dad34f6261cf5a8c51cd3c349
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2024

Terms | Privacy