ramnit | 21077824b7eea56bdfe182de863fe599286c70fd067744faf6fa850da7342db3 | Triage

Submit
Reports

Overview

overview

Static

static

21077824b7...b3.exe

windows7_x64

21077824b7...b3.exe

windows10-2004_x64

Sharing

General

Target

21077824b7eea56bdfe182de863fe599286c70fd067744faf6fa850da7342db3
Size

136KB
Sample

220225-eax4kaedf6
MD5

4f6fa39dd730b027ee0a9fa0196a2d08
SHA1

ce34492cb501eec84b59a251bd2d50b35d6afcb2
SHA256

21077824b7eea56bdfe182de863fe599286c70fd067744faf6fa850da7342db3
SHA512

e44364668706eaf762c4bab3f31e0bd64b8107969d16f382cff2e24d860c0c2df2119baa0e6633ad68cfd0d2a966aa7dc7e84201004213e4fb4ed9ad3ad4a029

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

21077824b7eea56bdfe182de863fe599286c70fd067744faf6fa850da7342db3.exe

Resource

win7-en-20211208

ramnit banker spyware stealer trojan upx worm

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

21077824b7eea56bdfe182de863fe599286c70fd067744faf6fa850da7342db3.exe

Resource

win10v2004-en-20220112

ramnit banker spyware stealer trojan upx worm

windows10-2004_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  21077824b7eea56bdfe182de863fe599286c70fd067744faf6fa850da7342db3
- Size
  
  136KB
- MD5
  
  4f6fa39dd730b027ee0a9fa0196a2d08
- SHA1
  
  ce34492cb501eec84b59a251bd2d50b35d6afcb2
- SHA256
  
  21077824b7eea56bdfe182de863fe599286c70fd067744faf6fa850da7342db3
- SHA512
  
  e44364668706eaf762c4bab3f31e0bd64b8107969d16f382cff2e24d860c0c2df2119baa0e6633ad68cfd0d2a966aa7dc7e84201004213e4fb4ed9ad3ad4a029
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2024

Terms | Privacy