ramnit | 6d1b44610f01aa178a9861d210120a7c43f4a696be6e9b22a5123f59c7a05c52 | Triage

Submit
Reports

Overview

overview

Static

static

6d1b44610f...52.dll

windows7-x64

6d1b44610f...52.dll

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

6d1b44610f01aa178a9861d210120a7c43f4a696be6e9b22a5123f59c7a05c52
Size

520KB
Sample

221106-zxrwaadhem
MD5

0a31eff8b91e6548795894b4201e5cf0
SHA1

57f28204416e8c7469e97a05fa401121f6950fbd
SHA256

6d1b44610f01aa178a9861d210120a7c43f4a696be6e9b22a5123f59c7a05c52
SHA512

cc6b3b1c962185729c3bf2876e1ba005b8a2531bae89ef7485eace618c7982add3703e654dfa27ff39548905a7576e3d7530fdc1fb603e19d99c8ea983c9cd85
SSDEEP

12288:Nmr7yOXRv6hcph5nSokNHBrgzRAlTKqTt8E36J:iF6hdrBBrCulKqTtF36J

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

6d1b44610f01aa178a9861d210120a7c43f4a696be6e9b22a5123f59c7a05c52.dll

Resource

win7-20220901-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

6d1b44610f01aa178a9861d210120a7c43f4a696be6e9b22a5123f59c7a05c52.dll

Resource

win10v2004-20220812-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  6d1b44610f01aa178a9861d210120a7c43f4a696be6e9b22a5123f59c7a05c52
- Size
  
  520KB
- MD5
  
  0a31eff8b91e6548795894b4201e5cf0
- SHA1
  
  57f28204416e8c7469e97a05fa401121f6950fbd
- SHA256
  
  6d1b44610f01aa178a9861d210120a7c43f4a696be6e9b22a5123f59c7a05c52
- SHA512
  
  cc6b3b1c962185729c3bf2876e1ba005b8a2531bae89ef7485eace618c7982add3703e654dfa27ff39548905a7576e3d7530fdc1fb603e19d99c8ea983c9cd85
- SSDEEP
  
  12288:Nmr7yOXRv6hcph5nSokNHBrgzRAlTKqTt8E36J:iF6hdrBBrCulKqTtF36J
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy