ramnit | 98fc29b7bc187d7d5619da44a9ed04773125bd85a76a65340509cca30bfa75fc | Triage

Submit
Reports

Overview

overview

Static

static

98fc29b7bc...fc.exe

windows7-x64

98fc29b7bc...fc.exe

windows10-2004-x64

Sharing

General

Target

98fc29b7bc187d7d5619da44a9ed04773125bd85a76a65340509cca30bfa75fc
Size

144KB
Sample

221124-arrwnafb56
MD5

271bc35816c049f57f12524f67116d70
SHA1

f923ae7fb613ffb86c5775121926f5731e7179f4
SHA256

98fc29b7bc187d7d5619da44a9ed04773125bd85a76a65340509cca30bfa75fc
SHA512

8bf573809bc5032f1bc4ab48c79398e789a2abaff447ef4314b8e01ccc6d703979edccda9e1f73c94b0743469e4ee58b8d2d599e855825048208313592c8a97f
SSDEEP

3072:Zje+a3JfFKqmROzoTq0+RO7IwnY1321bHCPe:s+a5fF7YkdNwBS3i7Ie

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

98fc29b7bc187d7d5619da44a9ed04773125bd85a76a65340509cca30bfa75fc.exe

Resource

win7-20221111-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral2

Sample

98fc29b7bc187d7d5619da44a9ed04773125bd85a76a65340509cca30bfa75fc.exe

Resource

win10v2004-20220812-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  98fc29b7bc187d7d5619da44a9ed04773125bd85a76a65340509cca30bfa75fc
- Size
  
  144KB
- MD5
  
  271bc35816c049f57f12524f67116d70
- SHA1
  
  f923ae7fb613ffb86c5775121926f5731e7179f4
- SHA256
  
  98fc29b7bc187d7d5619da44a9ed04773125bd85a76a65340509cca30bfa75fc
- SHA512
  
  8bf573809bc5032f1bc4ab48c79398e789a2abaff447ef4314b8e01ccc6d703979edccda9e1f73c94b0743469e4ee58b8d2d599e855825048208313592c8a97f
- SSDEEP
  
  3072:Zje+a3JfFKqmROzoTq0+RO7IwnY1321bHCPe:s+a5fF7YkdNwBS3i7Ie
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Deletes itself
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy