ramnit | cd396276c02eeaa15dfd743e75a8ffbd2304291d6494e333b08d3e45c9fa16f8 | Triage

Submit
Reports

Overview

overview

Static

static

cd396276c0...f8.dll

windows7_x64

cd396276c0...f8.dll

windows10_x64

Sharing

General

Target

cd396276c02eeaa15dfd743e75a8ffbd2304291d6494e333b08d3e45c9fa16f8
Size

204KB
Sample

210513-7t42ffztwj
MD5

a1efcef6dddd2c8687b892627c0ddb7c
SHA1

f36c13a823e457d8813b74c256a9fa29d19bc1fc
SHA256

cd396276c02eeaa15dfd743e75a8ffbd2304291d6494e333b08d3e45c9fa16f8
SHA512

cd69283f1562cb72f22f004f2d61ab453a11ec1d7823696faddc4d1b7ea299f177b87f35c3bead11af764c77a32369e8fa601e01e72a859afac4edd137a6deb8

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

cd396276c02eeaa15dfd743e75a8ffbd2304291d6494e333b08d3e45c9fa16f8.dll

Resource

win7v20210408

ramnit banker spyware stealer trojan upx worm

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

cd396276c02eeaa15dfd743e75a8ffbd2304291d6494e333b08d3e45c9fa16f8.dll

Resource

win10v20210410

ramnit banker spyware stealer trojan upx worm

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  cd396276c02eeaa15dfd743e75a8ffbd2304291d6494e333b08d3e45c9fa16f8
- Size
  
  204KB
- MD5
  
  a1efcef6dddd2c8687b892627c0ddb7c
- SHA1
  
  f36c13a823e457d8813b74c256a9fa29d19bc1fc
- SHA256
  
  cd396276c02eeaa15dfd743e75a8ffbd2304291d6494e333b08d3e45c9fa16f8
- SHA512
  
  cd69283f1562cb72f22f004f2d61ab453a11ec1d7823696faddc4d1b7ea299f177b87f35c3bead11af764c77a32369e8fa601e01e72a859afac4edd137a6deb8
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2024

Terms | Privacy