ramnit | 5c445d1bb605404b53f1d7b13a60c9f3335aa33221524dab84cf73df010dba71 | Triage

Submit
Reports

Overview

overview

Static

static

1

5c445d1bb6...71.exe

windows7-x64

5c445d1bb6...71.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

5c445d1bb605404b53f1d7b13a60c9f3335aa33221524dab84cf73df010dba71
Size

2.6MB
Sample

221125-xken3sgb35
MD5

09ec50dfce15409de75a00a000116566
SHA1

1326e14aeac0acc0f9cddec275fbe5edb310d29b
SHA256

5c445d1bb605404b53f1d7b13a60c9f3335aa33221524dab84cf73df010dba71
SHA512

bda8c42a45d08a0b7f8246ba995bcddb412f90ca9c98d5fb3196ab6214afa9b4e42227a31af2b80c78b3c9de7bd77726ccc33eaa5e6d95ffdc19264f659fd12d
SSDEEP

49152:21T+EIxptUCzJeOPSViYVqLxmyfyD2phLtaAGcoaNKIayOzRkMmo8shJGDJ:UrI1UCEYShyZDLQA8AONkMmVoJQJ

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

5c445d1bb605404b53f1d7b13a60c9f3335aa33221524dab84cf73df010dba71.exe

Resource

win7-20220812-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

5c445d1bb605404b53f1d7b13a60c9f3335aa33221524dab84cf73df010dba71.exe

Resource

win10v2004-20220812-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  5c445d1bb605404b53f1d7b13a60c9f3335aa33221524dab84cf73df010dba71
- Size
  
  2.6MB
- MD5
  
  09ec50dfce15409de75a00a000116566
- SHA1
  
  1326e14aeac0acc0f9cddec275fbe5edb310d29b
- SHA256
  
  5c445d1bb605404b53f1d7b13a60c9f3335aa33221524dab84cf73df010dba71
- SHA512
  
  bda8c42a45d08a0b7f8246ba995bcddb412f90ca9c98d5fb3196ab6214afa9b4e42227a31af2b80c78b3c9de7bd77726ccc33eaa5e6d95ffdc19264f659fd12d
- SSDEEP
  
  49152:21T+EIxptUCzJeOPSViYVqLxmyfyD2phLtaAGcoaNKIayOzRkMmo8shJGDJ:UrI1UCEYShyZDLQA8AONkMmVoJQJ
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy