ramnit | b185a800a8c97e5b8d183ea590335f10217da747bc53b0d117ae25a03a2ecd20 | Triage

Submit
Reports

Overview

overview

Static

static

b185a800a8...20.dll

windows7-x64

b185a800a8...20.dll

windows10-2004-x64

Sharing

General

Target

b185a800a8c97e5b8d183ea590335f10217da747bc53b0d117ae25a03a2ecd20
Size

260KB
Sample

221106-zkgvjsddbn
MD5

0c3dd4dbbdc1b358be8a3d95d379cf50
SHA1

3ce305aa61e35f7d9ce3f2df8c9ad72f80e6b554
SHA256

b185a800a8c97e5b8d183ea590335f10217da747bc53b0d117ae25a03a2ecd20
SHA512

9c05cc97eefc28a898d65b0c0f0276827ccee807774929fab05fe8400bdfbe451ecb0fb53b477bd1004097dc8e647c8921c1796db1ef3715289cd2ae97844dda
SSDEEP

6144:gr5fPz0oIywhgXDM5n8Cc9HSxmhzz7rYLhkInkpmc:gNzTIywMDG879yxaX7cLhnnkpP

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

b185a800a8c97e5b8d183ea590335f10217da747bc53b0d117ae25a03a2ecd20.dll

Resource

win7-20220901-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

b185a800a8c97e5b8d183ea590335f10217da747bc53b0d117ae25a03a2ecd20.dll

Resource

win10v2004-20220812-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  b185a800a8c97e5b8d183ea590335f10217da747bc53b0d117ae25a03a2ecd20
- Size
  
  260KB
- MD5
  
  0c3dd4dbbdc1b358be8a3d95d379cf50
- SHA1
  
  3ce305aa61e35f7d9ce3f2df8c9ad72f80e6b554
- SHA256
  
  b185a800a8c97e5b8d183ea590335f10217da747bc53b0d117ae25a03a2ecd20
- SHA512
  
  9c05cc97eefc28a898d65b0c0f0276827ccee807774929fab05fe8400bdfbe451ecb0fb53b477bd1004097dc8e647c8921c1796db1ef3715289cd2ae97844dda
- SSDEEP
  
  6144:gr5fPz0oIywhgXDM5n8Cc9HSxmhzz7rYLhkInkpmc:gNzTIywMDG879yxaX7cLhnnkpP
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy