ramnit | 35f832e409b2043f4674b37ae1b26a76a38c9c92b6b08c5d128209336fa8ed89 | Triage

Submit
Reports

Overview

overview

Static

static

35f832e409...89.exe

windows7-x64

35f832e409...89.exe

windows10-2004-x64

8

Sharing

General

Target

35f832e409b2043f4674b37ae1b26a76a38c9c92b6b08c5d128209336fa8ed89
Size

589KB
Sample

221106-z72hgaeddk
MD5

07229a61c2e7869533a3853c32f7dae0
SHA1

9b680ebe1919f775b0322367b601d11cb7ea078a
SHA256

35f832e409b2043f4674b37ae1b26a76a38c9c92b6b08c5d128209336fa8ed89
SHA512

741702c06121c5cc1375723aaa1e36e958ff2c58b5d3212acda9427a23aa2b2f16f840a7413f7b3790ca525bd67932333af0247645464e15b135f718f6a9936d
SSDEEP

12288:nJUh2HE91S6/9g/vCZo2oH0F+GkoLnt1P181OtP1CmB5p:3k9zWZ0Z1P181OtPnp

Score

10^/10

ramnit banker evasion spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

35f832e409b2043f4674b37ae1b26a76a38c9c92b6b08c5d128209336fa8ed89.exe

Resource

win7-20220812-en

ramnit banker evasion spyware stealer trojan upx worm

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

35f832e409b2043f4674b37ae1b26a76a38c9c92b6b08c5d128209336fa8ed89.exe

Resource

win10v2004-20220812-en

evasion trojan upx

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  35f832e409b2043f4674b37ae1b26a76a38c9c92b6b08c5d128209336fa8ed89
- Size
  
  589KB
- MD5
  
  07229a61c2e7869533a3853c32f7dae0
- SHA1
  
  9b680ebe1919f775b0322367b601d11cb7ea078a
- SHA256
  
  35f832e409b2043f4674b37ae1b26a76a38c9c92b6b08c5d128209336fa8ed89
- SHA512
  
  741702c06121c5cc1375723aaa1e36e958ff2c58b5d3212acda9427a23aa2b2f16f840a7413f7b3790ca525bd67932333af0247645464e15b135f718f6a9936d
- SSDEEP
  
  12288:nJUh2HE91S6/9g/vCZo2oH0F+GkoLnt1P181OtP1CmB5p:3k9zWZ0Z1P181OtPnp
Score

10^/10

ramnit banker evasion spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerevasionspywarestealertrojanupxworm

behavioral2

evasiontrojanupx

© 2018-2024

Terms | Privacy