ramnit | 0e6cf3c876ca42d29942a0e4d8da474912a86ae8c712de731143b74f94cdf99b | Triage

Submit
Reports

Overview

overview

Static

static

0e6cf3c876...9b.dll

windows7-x64

0e6cf3c876...9b.dll

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

0e6cf3c876ca42d29942a0e4d8da474912a86ae8c712de731143b74f94cdf99b
Size

208KB
Sample

221121-nejleabh2v
MD5

323be6ea9c50b7d95290615e265441f0
SHA1

bde192b65c8bad3eb65bbe62c6a810dffa05342a
SHA256

0e6cf3c876ca42d29942a0e4d8da474912a86ae8c712de731143b74f94cdf99b
SHA512

3bdee46803e67271a0b4a3949c01608de3d661be3c3eae01d1f07d8fcb21f422d424e8ca69a7399ef627f077fcb0e3f374bc53ddba29885cdbce0cfccdfb448d
SSDEEP

3072:vEHwehamqWvp4zzODTyJjqlltVZc7aNPgZhcbWDhfHYvO7XNW0V:o7uzzMMqbIaN0hcKtegNWu

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

0e6cf3c876ca42d29942a0e4d8da474912a86ae8c712de731143b74f94cdf99b.dll

Resource

win7-20220901-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

0e6cf3c876ca42d29942a0e4d8da474912a86ae8c712de731143b74f94cdf99b.dll

Resource

win10v2004-20221111-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  0e6cf3c876ca42d29942a0e4d8da474912a86ae8c712de731143b74f94cdf99b
- Size
  
  208KB
- MD5
  
  323be6ea9c50b7d95290615e265441f0
- SHA1
  
  bde192b65c8bad3eb65bbe62c6a810dffa05342a
- SHA256
  
  0e6cf3c876ca42d29942a0e4d8da474912a86ae8c712de731143b74f94cdf99b
- SHA512
  
  3bdee46803e67271a0b4a3949c01608de3d661be3c3eae01d1f07d8fcb21f422d424e8ca69a7399ef627f077fcb0e3f374bc53ddba29885cdbce0cfccdfb448d
- SSDEEP
  
  3072:vEHwehamqWvp4zzODTyJjqlltVZc7aNPgZhcbWDhfHYvO7XNW0V:o7uzzMMqbIaN0hcKtegNWu
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy