ramnit | fdb004587cefb267e42299f32c2850204b7af78a2b27a4a11eb179fcf4ff1b04 | Triage

Submit
Reports

Overview

overview

Static

static

fdb004587c...04.dll

windows7-x64

fdb004587c...04.dll

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

fdb004587cefb267e42299f32c2850204b7af78a2b27a4a11eb179fcf4ff1b04
Size

1.5MB
Sample

221003-xtg6kacacj
MD5

271d54ecd5488c6f9a31fa07dca7d490
SHA1

14b1bb83d47cc132e2dbe57d3c1aa746d966df8c
SHA256

fdb004587cefb267e42299f32c2850204b7af78a2b27a4a11eb179fcf4ff1b04
SHA512

b7d20b69006123ee761c8fca00a16f7fbbdf72476ad57c2fbbc08d39f3a3ef93f1f561cc836fca74c8f03734f8602712dc8658ad0b816a848b506e80d3ab0031
SSDEEP

12288:uyCbF/dJw216qtdWKWNKDqXVSjjzw4QHCURyfg/r:dCbpfv1rdWKnDMSElAfq

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

fdb004587cefb267e42299f32c2850204b7af78a2b27a4a11eb179fcf4ff1b04.dll

Resource

win7-20220812-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

fdb004587cefb267e42299f32c2850204b7af78a2b27a4a11eb179fcf4ff1b04.dll

Resource

win10v2004-20220812-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  fdb004587cefb267e42299f32c2850204b7af78a2b27a4a11eb179fcf4ff1b04
- Size
  
  1.5MB
- MD5
  
  271d54ecd5488c6f9a31fa07dca7d490
- SHA1
  
  14b1bb83d47cc132e2dbe57d3c1aa746d966df8c
- SHA256
  
  fdb004587cefb267e42299f32c2850204b7af78a2b27a4a11eb179fcf4ff1b04
- SHA512
  
  b7d20b69006123ee761c8fca00a16f7fbbdf72476ad57c2fbbc08d39f3a3ef93f1f561cc836fca74c8f03734f8602712dc8658ad0b816a848b506e80d3ab0031
- SSDEEP
  
  12288:uyCbF/dJw216qtdWKWNKDqXVSjjzw4QHCURyfg/r:dCbpfv1rdWKnDMSElAfq
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy