ramnit | 4690118e97a83575578f57b17a82f7332322b33f32b1e31084fbf1c859b4ea2c | Triage

Submit
Reports

Overview

overview

Static

static

4690118e97...2c.dll

windows7-x64

4690118e97...2c.dll

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

4690118e97a83575578f57b17a82f7332322b33f32b1e31084fbf1c859b4ea2c
Size

328KB
Sample

221011-2nx22shgb4
MD5

6d9dc5089127367159f92236c1408b40
SHA1

599dec5d54b0a4e0e8ab8121674d6b630aa65824
SHA256

4690118e97a83575578f57b17a82f7332322b33f32b1e31084fbf1c859b4ea2c
SHA512

52c8d06763f1c00aca08b56c7a7070fd44dcdb2808be9f04b5e71bdf9a5b70ebfa08872cad84cbce0f12af006dd5a7efaa870550b01331783d7151d1cfff672c
SSDEEP

6144:ueuKc2MvC6nI6ysyvtdsCe1psrAxWM6LZxKRFkr0fGZPs:ueuKX6nI6ys0KCGs0xWB4er0fkU

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

4690118e97a83575578f57b17a82f7332322b33f32b1e31084fbf1c859b4ea2c.dll

Resource

win7-20220812-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

4690118e97a83575578f57b17a82f7332322b33f32b1e31084fbf1c859b4ea2c.dll

Resource

win10v2004-20220812-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  4690118e97a83575578f57b17a82f7332322b33f32b1e31084fbf1c859b4ea2c
- Size
  
  328KB
- MD5
  
  6d9dc5089127367159f92236c1408b40
- SHA1
  
  599dec5d54b0a4e0e8ab8121674d6b630aa65824
- SHA256
  
  4690118e97a83575578f57b17a82f7332322b33f32b1e31084fbf1c859b4ea2c
- SHA512
  
  52c8d06763f1c00aca08b56c7a7070fd44dcdb2808be9f04b5e71bdf9a5b70ebfa08872cad84cbce0f12af006dd5a7efaa870550b01331783d7151d1cfff672c
- SSDEEP
  
  6144:ueuKc2MvC6nI6ysyvtdsCe1psrAxWM6LZxKRFkr0fGZPs:ueuKX6nI6ys0KCGs0xWB4er0fkU
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy