ramnit | d60dbfa4335a3736b7b5a04acf7424e91fc1671932d9128669bc21667c766904 | Triage

Submit
Reports

Overview

overview

Static

static

d60dbfa433...04.exe

windows7_x64

d60dbfa433...04.exe

windows10_x64

Sharing

General

Target

d60dbfa4335a3736b7b5a04acf7424e91fc1671932d9128669bc21667c766904
Size

720KB
Sample

210513-n86mpkg3ga
MD5

2e67ca560ecb3b64b0c272df82779fb2
SHA1

b2240e96c5b91d7c82dcaec61e094cab73e46f61
SHA256

d60dbfa4335a3736b7b5a04acf7424e91fc1671932d9128669bc21667c766904
SHA512

4b986d74d5d4b2cc56ed3b08be36a549dc141dc3401d38979527473e05a26e8700bb8945077ce9c0914785ecebfd2ecac1bacfb8fec47282b4c0b5b0457545bb

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

d60dbfa4335a3736b7b5a04acf7424e91fc1671932d9128669bc21667c766904.exe

Resource

win7v20210410

ramnit banker spyware stealer trojan upx worm

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

d60dbfa4335a3736b7b5a04acf7424e91fc1671932d9128669bc21667c766904.exe

Resource

win10v20210410

ramnit banker spyware stealer trojan upx worm

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  d60dbfa4335a3736b7b5a04acf7424e91fc1671932d9128669bc21667c766904
- Size
  
  720KB
- MD5
  
  2e67ca560ecb3b64b0c272df82779fb2
- SHA1
  
  b2240e96c5b91d7c82dcaec61e094cab73e46f61
- SHA256
  
  d60dbfa4335a3736b7b5a04acf7424e91fc1671932d9128669bc21667c766904
- SHA512
  
  4b986d74d5d4b2cc56ed3b08be36a549dc141dc3401d38979527473e05a26e8700bb8945077ce9c0914785ecebfd2ecac1bacfb8fec47282b4c0b5b0457545bb
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2024

Terms | Privacy