ramnit | f31fba553a54dd38c0e347efb83c66d859adf717566ed0e2965b5d5838aedb31 | Triage

Submit
Reports

Overview

overview

Static

static

f31fba553a...31.dll

windows7-x64

f31fba553a...31.dll

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

f31fba553a54dd38c0e347efb83c66d859adf717566ed0e2965b5d5838aedb31
Size

1.2MB
Sample

221011-n5hrssdcfm
MD5

1e931236accf75ba61e0f52b04723b50
SHA1

90518ffceaa11d0f45f1a428e34d44178fe74d73
SHA256

f31fba553a54dd38c0e347efb83c66d859adf717566ed0e2965b5d5838aedb31
SHA512

3a4fc271c9f58cd32f1eee0229a7a0541f4fcd720f48bab8151007c914345eb4a47b29bc07d5b10aed89ea4114f3b90361a60216cf81c6755754deafb843a85f
SSDEEP

24576:QNeoNus5zvYhUB8bLZY3ssGXYpQ7kWlpih9kk4dx298qdvVTcVwdyLPHBELSlKms:aeoNDyV/L5ELSlSA4n6WEMk

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

f31fba553a54dd38c0e347efb83c66d859adf717566ed0e2965b5d5838aedb31.dll

Resource

win7-20220812-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

f31fba553a54dd38c0e347efb83c66d859adf717566ed0e2965b5d5838aedb31.dll

Resource

win10v2004-20220812-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  f31fba553a54dd38c0e347efb83c66d859adf717566ed0e2965b5d5838aedb31
- Size
  
  1.2MB
- MD5
  
  1e931236accf75ba61e0f52b04723b50
- SHA1
  
  90518ffceaa11d0f45f1a428e34d44178fe74d73
- SHA256
  
  f31fba553a54dd38c0e347efb83c66d859adf717566ed0e2965b5d5838aedb31
- SHA512
  
  3a4fc271c9f58cd32f1eee0229a7a0541f4fcd720f48bab8151007c914345eb4a47b29bc07d5b10aed89ea4114f3b90361a60216cf81c6755754deafb843a85f
- SSDEEP
  
  24576:QNeoNus5zvYhUB8bLZY3ssGXYpQ7kWlpih9kk4dx298qdvVTcVwdyLPHBELSlKms:aeoNDyV/L5ELSlSA4n6WEMk
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy