ramnit | 337dd2a4595e4f27e667ddda995e9d33787c39dad286042d5d4b8b9b6c842d0d | Triage

Submit
Reports

Overview

overview

Static

static

337dd2a459...0d.dll

windows7-x64

337dd2a459...0d.dll

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

337dd2a4595e4f27e667ddda995e9d33787c39dad286042d5d4b8b9b6c842d0d
Size

292KB
Sample

221106-z8f8xscce8
MD5

0e3f927ec8875e5f3fe51d34904a19c0
SHA1

7023021980216a648bbdb129f45e0c9174e4a320
SHA256

337dd2a4595e4f27e667ddda995e9d33787c39dad286042d5d4b8b9b6c842d0d
SHA512

14f7a17444de97d1e4f81c51a9d18b35b420be8fafb42efab3d210f600db1e0bfa8927dc8120aca6bd42914d3907b3eae915a9ad3af523e8c4ad14d1751269ae
SSDEEP

3072:d7wWdCMC/DmbptJT8yQCekJZyJQL7xctpP+RXgol33MpVyKrANuj8ccA4:KW4rQuyQUNctp8xaVfN

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

337dd2a4595e4f27e667ddda995e9d33787c39dad286042d5d4b8b9b6c842d0d.dll

Resource

win7-20220812-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

337dd2a4595e4f27e667ddda995e9d33787c39dad286042d5d4b8b9b6c842d0d.dll

Resource

win10v2004-20220812-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  337dd2a4595e4f27e667ddda995e9d33787c39dad286042d5d4b8b9b6c842d0d
- Size
  
  292KB
- MD5
  
  0e3f927ec8875e5f3fe51d34904a19c0
- SHA1
  
  7023021980216a648bbdb129f45e0c9174e4a320
- SHA256
  
  337dd2a4595e4f27e667ddda995e9d33787c39dad286042d5d4b8b9b6c842d0d
- SHA512
  
  14f7a17444de97d1e4f81c51a9d18b35b420be8fafb42efab3d210f600db1e0bfa8927dc8120aca6bd42914d3907b3eae915a9ad3af523e8c4ad14d1751269ae
- SSDEEP
  
  3072:d7wWdCMC/DmbptJT8yQCekJZyJQL7xctpP+RXgol33MpVyKrANuj8ccA4:KW4rQuyQUNctp8xaVfN
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy