ramnit | 94fb2a22a059dff2d4ef5ac3447e6f106824baea43083627d8f9076c9379ccd5 | Triage

Submit
Reports

Overview

overview

Static

static

1

94fb2a22a0...d5.exe

windows7-x64

94fb2a22a0...d5.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

94fb2a22a059dff2d4ef5ac3447e6f106824baea43083627d8f9076c9379ccd5
Size

4.8MB
Sample

221125-p81x8ada9w
MD5

0d0c3fd745ee434f920b568edc397120
SHA1

c9a557a8b9b23ea6b7301ec435e96d3421fdf6eb
SHA256

94fb2a22a059dff2d4ef5ac3447e6f106824baea43083627d8f9076c9379ccd5
SHA512

7d57a248a03fc33094d1a1e38a53d78b18e8b4c00fb91f6700cdeb8b9070f50f9083ed6a4bc6750b90e192fe07b9b54389bb21fe5140fbce8a02523a162a0914
SSDEEP

98304:TDLQA8AONkqBZp5vh73ijpz7hiWG4RiSIr8pMK1RLiR21d/SV/JQr:HQFNkq38jp8WZi1r8pPLis1VqS

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

94fb2a22a059dff2d4ef5ac3447e6f106824baea43083627d8f9076c9379ccd5.exe

Resource

win7-20221111-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

94fb2a22a059dff2d4ef5ac3447e6f106824baea43083627d8f9076c9379ccd5.exe

Resource

win10v2004-20220812-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  94fb2a22a059dff2d4ef5ac3447e6f106824baea43083627d8f9076c9379ccd5
- Size
  
  4.8MB
- MD5
  
  0d0c3fd745ee434f920b568edc397120
- SHA1
  
  c9a557a8b9b23ea6b7301ec435e96d3421fdf6eb
- SHA256
  
  94fb2a22a059dff2d4ef5ac3447e6f106824baea43083627d8f9076c9379ccd5
- SHA512
  
  7d57a248a03fc33094d1a1e38a53d78b18e8b4c00fb91f6700cdeb8b9070f50f9083ed6a4bc6750b90e192fe07b9b54389bb21fe5140fbce8a02523a162a0914
- SSDEEP
  
  98304:TDLQA8AONkqBZp5vh73ijpz7hiWG4RiSIr8pMK1RLiR21d/SV/JQr:HQFNkq38jp8WZi1r8pPLis1VqS
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy