ramnit | a8305b2f050ee6220ab610c6f684d5b2d104138d24d95dcd33082336a3f9a7d4 | Triage

Submit
Reports

Overview

overview

Static

static

a8305b2f05...d4.dll

windows7-x64

a8305b2f05...d4.dll

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

a8305b2f050ee6220ab610c6f684d5b2d104138d24d95dcd33082336a3f9a7d4
Size

868KB
Sample

221121-ml2j5aae7s
MD5

22c4e5349713785c6554cbaf47bc69c0
SHA1

2988bc367826aca0ae79df54fe3b6afe0caae7ff
SHA256

a8305b2f050ee6220ab610c6f684d5b2d104138d24d95dcd33082336a3f9a7d4
SHA512

571e311e67a422423083551d464fa2609116512e56a34416e64c1df97829068e17153b1b91e5912e9f252939264232105b7e3c2286478ae9d72c22be3ff5e055
SSDEEP

24576:CokEyEsEesVAqLJiZvqyrC9FNNaxXGrlwIB87qhZUFd4XH4eRCyDGcpZkdzFD:CokSsvT26BF

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

a8305b2f050ee6220ab610c6f684d5b2d104138d24d95dcd33082336a3f9a7d4.dll

Resource

win7-20220901-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

a8305b2f050ee6220ab610c6f684d5b2d104138d24d95dcd33082336a3f9a7d4.dll

Resource

win10v2004-20221111-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  a8305b2f050ee6220ab610c6f684d5b2d104138d24d95dcd33082336a3f9a7d4
- Size
  
  868KB
- MD5
  
  22c4e5349713785c6554cbaf47bc69c0
- SHA1
  
  2988bc367826aca0ae79df54fe3b6afe0caae7ff
- SHA256
  
  a8305b2f050ee6220ab610c6f684d5b2d104138d24d95dcd33082336a3f9a7d4
- SHA512
  
  571e311e67a422423083551d464fa2609116512e56a34416e64c1df97829068e17153b1b91e5912e9f252939264232105b7e3c2286478ae9d72c22be3ff5e055
- SSDEEP
  
  24576:CokEyEsEesVAqLJiZvqyrC9FNNaxXGrlwIB87qhZUFd4XH4eRCyDGcpZkdzFD:CokSsvT26BF
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy