ramnit | 0834cae347fa49ec40179e4592896b086f113a1315c592a1b3271e46cec242ec | Triage

Submit
Reports

Overview

overview

Static

static

8

0834cae347...ec.dll

windows7-x64

0834cae347...ec.dll

windows10-2004-x64

8

Sharing

General

Target

0834cae347fa49ec40179e4592896b086f113a1315c592a1b3271e46cec242ec
Size

1.5MB
Sample

221030-v8e9eadbhn
MD5

8329cc74f273668faf0aa5c306f70de2
SHA1

53f4198739ff10fadefb188b60d3b9ea1de9b271
SHA256

0834cae347fa49ec40179e4592896b086f113a1315c592a1b3271e46cec242ec
SHA512

11721cb1648ad5bb38705e3c48749d21f6a30ea55ceb832f4c4858ae9f75fbcf9421a7ebfabe85edcbba08dc386fdecd1bfd8aba4d435edeb868825a31178e38
SSDEEP

49152:QNVE+2VQYCJ+tCgBnRaGYqLILN03x+5UtMbc:QbppYCJ+YgBnRJYqLIh03hv

Score

10^/10

ramnit zloader banker botnet spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

0834cae347fa49ec40179e4592896b086f113a1315c592a1b3271e46cec242ec.dll

Resource

win7-20220812-en

ramnit zloader banker botnet spyware stealer trojan upx worm

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

0834cae347fa49ec40179e4592896b086f113a1315c592a1b3271e46cec242ec.dll

Resource

win10v2004-20220812-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  0834cae347fa49ec40179e4592896b086f113a1315c592a1b3271e46cec242ec
- Size
  
  1.5MB
- MD5
  
  8329cc74f273668faf0aa5c306f70de2
- SHA1
  
  53f4198739ff10fadefb188b60d3b9ea1de9b271
- SHA256
  
  0834cae347fa49ec40179e4592896b086f113a1315c592a1b3271e46cec242ec
- SHA512
  
  11721cb1648ad5bb38705e3c48749d21f6a30ea55ceb832f4c4858ae9f75fbcf9421a7ebfabe85edcbba08dc386fdecd1bfd8aba4d435edeb868825a31178e38
- SSDEEP
  
  49152:QNVE+2VQYCJ+tCgBnRaGYqLILN03x+5UtMbc:QbppYCJ+YgBnRJYqLIh03hv
Score

10^/10

ramnit zloader banker botnet spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Zloader, Terdot, DELoader, ZeusSphinx
  Zloader is a malware strain that was initially discovered back in August 2015.
  trojan botnet zloader
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitzloaderbankerbotnetspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy