ramnit | c37980e95eb2064f2ca3cb1cd8f6652c3bb3f22dddd997e8841710fcc751e574 | Triage

Submit
Reports

Overview

overview

Static

static

1

c37980e95e...74.exe

windows7-x64

c37980e95e...74.exe

windows10-2004-x64

Sharing

General

Target

c37980e95eb2064f2ca3cb1cd8f6652c3bb3f22dddd997e8841710fcc751e574
Size

19.0MB
Sample

221123-z9jenshh2v
MD5

1e35ad726a3bdfe31f3278d5b3ce765e
SHA1

f2938684fac5cac283c557340b41901a93359210
SHA256

c37980e95eb2064f2ca3cb1cd8f6652c3bb3f22dddd997e8841710fcc751e574
SHA512

4b2a9bb1e404c0500b7d6ac5bd3f9300955db31be44b8c2cf997c233bb09340378c792cc61d4414c232c4ac55e4242b4ab263d820494a317604227ef4b2ded72
SSDEEP

393216:tJNaQzZHhcntedabG9ZJ7cSpbYX0ls0wy/m4RVaL6uLzPkkFV:taQzZqntmab0oSBYXysFf4RVaL6uLtV

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

c37980e95eb2064f2ca3cb1cd8f6652c3bb3f22dddd997e8841710fcc751e574.exe

Resource

win7-20221111-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

c37980e95eb2064f2ca3cb1cd8f6652c3bb3f22dddd997e8841710fcc751e574.exe

Resource

win10v2004-20220812-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  c37980e95eb2064f2ca3cb1cd8f6652c3bb3f22dddd997e8841710fcc751e574
- Size
  
  19.0MB
- MD5
  
  1e35ad726a3bdfe31f3278d5b3ce765e
- SHA1
  
  f2938684fac5cac283c557340b41901a93359210
- SHA256
  
  c37980e95eb2064f2ca3cb1cd8f6652c3bb3f22dddd997e8841710fcc751e574
- SHA512
  
  4b2a9bb1e404c0500b7d6ac5bd3f9300955db31be44b8c2cf997c233bb09340378c792cc61d4414c232c4ac55e4242b4ab263d820494a317604227ef4b2ded72
- SSDEEP
  
  393216:tJNaQzZHhcntedabG9ZJ7cSpbYX0ls0wy/m4RVaL6uLzPkkFV:taQzZqntmab0oSBYXysFf4RVaL6uLtV
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2024

Terms | Privacy