ramnit | 65cb1476af6dc9eb7c572cf573a8abe8a00f88f73a944471654996900fe7a941 | Triage

Submit
Reports

Overview

overview

Static

static

65cb1476af...41.xll

windows7-x64

65cb1476af...41.xll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

Target

65cb1476af6dc9eb7c572cf573a8abe8a00f88f73a944471654996900fe7a941
Size

115KB
Sample

221003-x77clscffq
MD5

48535472f3ff2b66a1adf2f40b87c9a0
SHA1

fc548cd83eba5569367f91b2b48cced8ec129c8d
SHA256

65cb1476af6dc9eb7c572cf573a8abe8a00f88f73a944471654996900fe7a941
SHA512

98096b5653a5ab58d8e5d70de9e7d3b607c9bb417982094033d64a758ea0b19d077aa1f4cc05f1516973c4004735cbd2aacb482c956c2355189bb2b700136523
SSDEEP

3072:cSQ3x6zMOIwawrDNKDhyHSPdIJlpvMK90d7:DQhIMNzGUyHSPcvMSO

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

65cb1476af6dc9eb7c572cf573a8abe8a00f88f73a944471654996900fe7a941.xll

Resource

win7-20220901-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

65cb1476af6dc9eb7c572cf573a8abe8a00f88f73a944471654996900fe7a941.xll

Resource

win10v2004-20220812-en

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  65cb1476af6dc9eb7c572cf573a8abe8a00f88f73a944471654996900fe7a941
- Size
  
  115KB
- MD5
  
  48535472f3ff2b66a1adf2f40b87c9a0
- SHA1
  
  fc548cd83eba5569367f91b2b48cced8ec129c8d
- SHA256
  
  65cb1476af6dc9eb7c572cf573a8abe8a00f88f73a944471654996900fe7a941
- SHA512
  
  98096b5653a5ab58d8e5d70de9e7d3b607c9bb417982094033d64a758ea0b19d077aa1f4cc05f1516973c4004735cbd2aacb482c956c2355189bb2b700136523
- SSDEEP
  
  3072:cSQ3x6zMOIwawrDNKDhyHSPdIJlpvMK90d7:DQhIMNzGUyHSPcvMSO
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2025

Terms | Privacy