ramnit | db7c24747ecc9e5ce652c6c364872611c21c4938a30a683dcf4ac4358561bb39 | Triage

Submit
Reports

Overview

overview

Static

static

db7c24747e...39.dll

windows7-x64

db7c24747e...39.dll

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

db7c24747ecc9e5ce652c6c364872611c21c4938a30a683dcf4ac4358561bb39
Size

268KB
Sample

221020-pme4maddfp
MD5

48286e6697e09ef9289a58dcf6fb72e0
SHA1

5b8051294b94c23af01d8e58af46df17ce64341e
SHA256

db7c24747ecc9e5ce652c6c364872611c21c4938a30a683dcf4ac4358561bb39
SHA512

34e84c1328202beccc465b20036894484c7da7472ad52c4c66e861fc4011b687fe07e1f95d012f7ebc199387aeddb5b15f80e2175feaa8468efed380ec15329a
SSDEEP

6144:EgsZ+yrnxrx6franYM+aVpudTPmG37NiL:EgQn7xrx6anZ+aVpupLw

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

db7c24747ecc9e5ce652c6c364872611c21c4938a30a683dcf4ac4358561bb39.dll

Resource

win7-20220812-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

db7c24747ecc9e5ce652c6c364872611c21c4938a30a683dcf4ac4358561bb39.dll

Resource

win10v2004-20220812-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  db7c24747ecc9e5ce652c6c364872611c21c4938a30a683dcf4ac4358561bb39
- Size
  
  268KB
- MD5
  
  48286e6697e09ef9289a58dcf6fb72e0
- SHA1
  
  5b8051294b94c23af01d8e58af46df17ce64341e
- SHA256
  
  db7c24747ecc9e5ce652c6c364872611c21c4938a30a683dcf4ac4358561bb39
- SHA512
  
  34e84c1328202beccc465b20036894484c7da7472ad52c4c66e861fc4011b687fe07e1f95d012f7ebc199387aeddb5b15f80e2175feaa8468efed380ec15329a
- SSDEEP
  
  6144:EgsZ+yrnxrx6franYM+aVpudTPmG37NiL:EgQn7xrx6anZ+aVpupLw
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy