ramnit | 85415aba61c0f7bee28f0106937a49c38ee25fe1be7e2ac4143a25bf63643974 | Triage

Submit
Reports

Overview

overview

Static

static

85415aba61...74.dll

windows7-x64

85415aba61...74.dll

windows10-2004-x64

8

Sharing

General

Target

85415aba61c0f7bee28f0106937a49c38ee25fe1be7e2ac4143a25bf63643974
Size

516KB
Sample

221129-jpg34sdb9w
MD5

0308dbade822c85b50d0984a201793e0
SHA1

233ec477b70e17ddc04c1c8c233b3cef60e3b79c
SHA256

85415aba61c0f7bee28f0106937a49c38ee25fe1be7e2ac4143a25bf63643974
SHA512

613924624bfd2fb85f800b27c2e23a38434af5d8f9baa2377403940a5995ec61346e84218e0ac9e5ce491a38261ae310d4656f7681f80976ed02ed039ba320ec
SSDEEP

12288:dzA5lZhy6RpB/6eXMVVLrkwTzCunpKI13YEqWswm6T:dzA5HhRPSeX2VHkuzRnpz1oxwm6T

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

85415aba61c0f7bee28f0106937a49c38ee25fe1be7e2ac4143a25bf63643974.dll

Resource

win7-20220812-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

85415aba61c0f7bee28f0106937a49c38ee25fe1be7e2ac4143a25bf63643974.dll

Resource

win10v2004-20220812-en

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  85415aba61c0f7bee28f0106937a49c38ee25fe1be7e2ac4143a25bf63643974
- Size
  
  516KB
- MD5
  
  0308dbade822c85b50d0984a201793e0
- SHA1
  
  233ec477b70e17ddc04c1c8c233b3cef60e3b79c
- SHA256
  
  85415aba61c0f7bee28f0106937a49c38ee25fe1be7e2ac4143a25bf63643974
- SHA512
  
  613924624bfd2fb85f800b27c2e23a38434af5d8f9baa2377403940a5995ec61346e84218e0ac9e5ce491a38261ae310d4656f7681f80976ed02ed039ba320ec
- SSDEEP
  
  12288:dzA5lZhy6RpB/6eXMVVLrkwTzCunpKI13YEqWswm6T:dzA5HhRPSeX2VHkuzRnpz1oxwm6T
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy