ramnit | c05f696f49666999663a4255aaf88e5b195eff00225eec8e061fcf5159b6daa4 | Triage

Submit
Reports

Overview

overview

Static

static

c05f696f49...a4.dll

windows7-x64

c05f696f49...a4.dll

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

c05f696f49666999663a4255aaf88e5b195eff00225eec8e061fcf5159b6daa4
Size

204KB
Sample

221030-2211vsehfp
MD5

a23304e935675c1227de3ad16531a9b0
SHA1

f12cafe6287a79391e23e366a055a1c1bf6105f2
SHA256

c05f696f49666999663a4255aaf88e5b195eff00225eec8e061fcf5159b6daa4
SHA512

89b20389bcbbbf30efb6c1e7c63c4a4e4fd7e1041ab765d6f8fa83e3f41c4e4fb04f0ec160b5e015aeb760a42c8f7822124e76d7944427d68ab2cde4611062b2
SSDEEP

6144:w4y8gOl216VVVVVVVVVeVVVVD2VVVVVVVVVVVVVVVVVVVR6fg/QwR/Q4EVVVldhU:ly8glK/XnWD

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

c05f696f49666999663a4255aaf88e5b195eff00225eec8e061fcf5159b6daa4.dll

Resource

win7-20220812-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

c05f696f49666999663a4255aaf88e5b195eff00225eec8e061fcf5159b6daa4.dll

Resource

win10v2004-20220901-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  c05f696f49666999663a4255aaf88e5b195eff00225eec8e061fcf5159b6daa4
- Size
  
  204KB
- MD5
  
  a23304e935675c1227de3ad16531a9b0
- SHA1
  
  f12cafe6287a79391e23e366a055a1c1bf6105f2
- SHA256
  
  c05f696f49666999663a4255aaf88e5b195eff00225eec8e061fcf5159b6daa4
- SHA512
  
  89b20389bcbbbf30efb6c1e7c63c4a4e4fd7e1041ab765d6f8fa83e3f41c4e4fb04f0ec160b5e015aeb760a42c8f7822124e76d7944427d68ab2cde4611062b2
- SSDEEP
  
  6144:w4y8gOl216VVVVVVVVVeVVVVD2VVVVVVVVVVVVVVVVVVVR6fg/QwR/Q4EVVVldhU:ly8glK/XnWD
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy