ramnit | 7271612637fe2240a9f57f4f722bbb8d6bc9158af404991074d3c77367a42073 | Triage

Submit
Reports

Overview

overview

Static

static

1

7271612637...73.exe

windows7-x64

7271612637...73.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

7271612637fe2240a9f57f4f722bbb8d6bc9158af404991074d3c77367a42073
Size

14.8MB
Sample

221127-c398gsgg3w
MD5

be2effbcceb1a6c29900178774d06249
SHA1

f67f56d6f5b73a8a0a62616b24cf8fcf0683f208
SHA256

7271612637fe2240a9f57f4f722bbb8d6bc9158af404991074d3c77367a42073
SHA512

32c817a5bc65d1eaf25d259a7da0e4c1a324a99fb3a1f2b612e61a5d18b818f85464e054e25c2fcaec549b9545a75875adfed7834caba2c922f9582a073675ea
SSDEEP

393216:6Qzhg5vcScXTvJJQSygqJNj7e8BpJDHhJxFgiVE1CvS801:6QzeqSuTYgOV7hp1Bryia4vx01

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

7271612637fe2240a9f57f4f722bbb8d6bc9158af404991074d3c77367a42073.exe

Resource

win7-20220812-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

7271612637fe2240a9f57f4f722bbb8d6bc9158af404991074d3c77367a42073.exe

Resource

win10v2004-20220812-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  7271612637fe2240a9f57f4f722bbb8d6bc9158af404991074d3c77367a42073
- Size
  
  14.8MB
- MD5
  
  be2effbcceb1a6c29900178774d06249
- SHA1
  
  f67f56d6f5b73a8a0a62616b24cf8fcf0683f208
- SHA256
  
  7271612637fe2240a9f57f4f722bbb8d6bc9158af404991074d3c77367a42073
- SHA512
  
  32c817a5bc65d1eaf25d259a7da0e4c1a324a99fb3a1f2b612e61a5d18b818f85464e054e25c2fcaec549b9545a75875adfed7834caba2c922f9582a073675ea
- SSDEEP
  
  393216:6Qzhg5vcScXTvJJQSygqJNj7e8BpJDHhJxFgiVE1CvS801:6QzeqSuTYgOV7hp1Bryia4vx01
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy