ramnit | 1aec48aedd041c4c132763b9968179c099659477cb69edbc15d2fe96dfb5293a | Triage

Submit
Reports

Overview

overview

Static

static

1aec48aedd...3a.exe

windows7-x64

1aec48aedd...3a.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

1aec48aedd041c4c132763b9968179c099659477cb69edbc15d2fe96dfb5293a
Size

108KB
Sample

221127-1tsh3sbg36
MD5

2cad25e9724d93db64dc8a1f8ac8d835
SHA1

ba9a46e067d3f29841f5eeba702ad7fe754df959
SHA256

1aec48aedd041c4c132763b9968179c099659477cb69edbc15d2fe96dfb5293a
SHA512

31fb6b57476535e1c3f81973b741d314d345d4738474e56796e9380c53e5468fd4054a97e55a69714d8f4299860d45e6abdfcddf3c5219d31489ca0ff8660f7d
SSDEEP

1536:icANJeBAH+vavxwuz9lQWrVblaXZ6uF1KGl8n7J8jqmAloOtnrb7dMxlF5ZUI2RQ:ijNsa+7uEWrVblaXZfgG68dMo8Z2f

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

1aec48aedd041c4c132763b9968179c099659477cb69edbc15d2fe96dfb5293a.exe

Resource

win7-20220901-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

1aec48aedd041c4c132763b9968179c099659477cb69edbc15d2fe96dfb5293a.exe

Resource

win10v2004-20221111-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  1aec48aedd041c4c132763b9968179c099659477cb69edbc15d2fe96dfb5293a
- Size
  
  108KB
- MD5
  
  2cad25e9724d93db64dc8a1f8ac8d835
- SHA1
  
  ba9a46e067d3f29841f5eeba702ad7fe754df959
- SHA256
  
  1aec48aedd041c4c132763b9968179c099659477cb69edbc15d2fe96dfb5293a
- SHA512
  
  31fb6b57476535e1c3f81973b741d314d345d4738474e56796e9380c53e5468fd4054a97e55a69714d8f4299860d45e6abdfcddf3c5219d31489ca0ff8660f7d
- SSDEEP
  
  1536:icANJeBAH+vavxwuz9lQWrVblaXZ6uF1KGl8n7J8jqmAloOtnrb7dMxlF5ZUI2RQ:ijNsa+7uEWrVblaXZfgG68dMo8Z2f
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy