ramnit | 7e535c1b2153729f5994c746bea39538929d61f5272b930d2570136071ba5627 | Triage

Submit
Reports

Overview

overview

Static

static

7e535c1b21...27.dll

windows7-x64

7e535c1b21...27.dll

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

7e535c1b2153729f5994c746bea39538929d61f5272b930d2570136071ba5627
Size

152KB
Sample

221001-wdsfxsacam
MD5

66152e19ccf0c2b4a4207e1f17500a2d
SHA1

d41df3d41952ccdb9575c6de86df549d683d51e3
SHA256

7e535c1b2153729f5994c746bea39538929d61f5272b930d2570136071ba5627
SHA512

840d6cc0df9d54d22295a570025f95e4c31e41a1d720d99cc5dad7304beda845f6430e1f44063b94408a3f03993349c7d52ab73936a50406432b831b2b669ce4
SSDEEP

3072:Ln4cV8gf2u41Z5tKlm/N0csKooTUnAjop4W7XFqXubl:z4y8gOl2I/N0hr9D95

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

7e535c1b2153729f5994c746bea39538929d61f5272b930d2570136071ba5627.dll

Resource

win7-20220812-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

7e535c1b2153729f5994c746bea39538929d61f5272b930d2570136071ba5627.dll

Resource

win10v2004-20220812-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  7e535c1b2153729f5994c746bea39538929d61f5272b930d2570136071ba5627
- Size
  
  152KB
- MD5
  
  66152e19ccf0c2b4a4207e1f17500a2d
- SHA1
  
  d41df3d41952ccdb9575c6de86df549d683d51e3
- SHA256
  
  7e535c1b2153729f5994c746bea39538929d61f5272b930d2570136071ba5627
- SHA512
  
  840d6cc0df9d54d22295a570025f95e4c31e41a1d720d99cc5dad7304beda845f6430e1f44063b94408a3f03993349c7d52ab73936a50406432b831b2b669ce4
- SSDEEP
  
  3072:Ln4cV8gf2u41Z5tKlm/N0csKooTUnAjop4W7XFqXubl:z4y8gOl2I/N0hr9D95
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy