ramnit | a08eb70a986e86ce95956c6d5a6309c373377cef988110402f504f4281fd24b3 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

8

a08eb70a98...b3.exe

windows7-x64

a08eb70a98...b3.exe

windows10-2004-x64

8

Sharing

General

Target

a08eb70a986e86ce95956c6d5a6309c373377cef988110402f504f4281fd24b3
Size

607KB
Sample

221127-k6c16aac41
MD5

589612fdc4e76a0ba365c88c05c9b384
SHA1

94258310104f59fc15ba786d52526f3f1f304c04
SHA256

a08eb70a986e86ce95956c6d5a6309c373377cef988110402f504f4281fd24b3
SHA512

54daffb7d0dd5a22b1a2fc82c2f014b682156ca80c683925a20b89678c080e8ad01fd6802f1534d1515dc8d11d10797c8bb29035cbc81673c3f2fe4cf90be032
SSDEEP

12288:9XehPUyg4bUfpGJVQEGkA31VSztRAl7eXIk6NNiDb2IpFmFtIUvSSd:h68xcUUJiOu1GAdeYkqNin2mFmFtxV

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

a08eb70a986e86ce95956c6d5a6309c373377cef988110402f504f4281fd24b3.exe

Resource

win7-20221111-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

a08eb70a986e86ce95956c6d5a6309c373377cef988110402f504f4281fd24b3.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  a08eb70a986e86ce95956c6d5a6309c373377cef988110402f504f4281fd24b3
- Size
  
  607KB
- MD5
  
  589612fdc4e76a0ba365c88c05c9b384
- SHA1
  
  94258310104f59fc15ba786d52526f3f1f304c04
- SHA256
  
  a08eb70a986e86ce95956c6d5a6309c373377cef988110402f504f4281fd24b3
- SHA512
  
  54daffb7d0dd5a22b1a2fc82c2f014b682156ca80c683925a20b89678c080e8ad01fd6802f1534d1515dc8d11d10797c8bb29035cbc81673c3f2fe4cf90be032
- SSDEEP
  
  12288:9XehPUyg4bUfpGJVQEGkA31VSztRAl7eXIk6NNiDb2IpFmFtIUvSSd:h68xcUUJiOu1GAdeYkqNin2mFmFtxV
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2025

Terms | Privacy