ramnit | 4923638c23f55afc1acb20a5106cdc92fc0cf9d1663f6e9d230c2253beec499e | Triage

Submit
Reports

Overview

overview

Static

static

4923638c23...9e.dll

windows7-x64

4923638c23...9e.dll

windows10-2004-x64

Sharing

General

Target

4923638c23f55afc1acb20a5106cdc92fc0cf9d1663f6e9d230c2253beec499e
Size

400KB
Sample

221129-jthv7sdf31
MD5

ca51f3cbe1d7fd89e467144d8bbb3eb0
SHA1

ac1930a0c38bdc7f7b2db8fc42b6ea42ff888f23
SHA256

4923638c23f55afc1acb20a5106cdc92fc0cf9d1663f6e9d230c2253beec499e
SHA512

2d2755c9b82c652357a8abb6575c55b810c51bc18ce369f20e4363b4be85d6ceb2400a96fba00b99f24273a27a46007afb7daeafdbee9560d600f28bbc5a2e7a
SSDEEP

6144:jcV9z83OtqxnEYmt3NEnvfF+Tbmbw6An8FMciFMNrb3YgxxpbCAOxO2ElvlEQ+2s:joz83OtIEzW+/m/AyF7bCrO/EQ+46h

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

4923638c23f55afc1acb20a5106cdc92fc0cf9d1663f6e9d230c2253beec499e.dll

Resource

win7-20220812-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

4923638c23f55afc1acb20a5106cdc92fc0cf9d1663f6e9d230c2253beec499e.dll

Resource

win10v2004-20221111-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  4923638c23f55afc1acb20a5106cdc92fc0cf9d1663f6e9d230c2253beec499e
- Size
  
  400KB
- MD5
  
  ca51f3cbe1d7fd89e467144d8bbb3eb0
- SHA1
  
  ac1930a0c38bdc7f7b2db8fc42b6ea42ff888f23
- SHA256
  
  4923638c23f55afc1acb20a5106cdc92fc0cf9d1663f6e9d230c2253beec499e
- SHA512
  
  2d2755c9b82c652357a8abb6575c55b810c51bc18ce369f20e4363b4be85d6ceb2400a96fba00b99f24273a27a46007afb7daeafdbee9560d600f28bbc5a2e7a
- SSDEEP
  
  6144:jcV9z83OtqxnEYmt3NEnvfF+Tbmbw6An8FMciFMNrb3YgxxpbCAOxO2ElvlEQ+2s:joz83OtIEzW+/m/AyF7bCrO/EQ+46h
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy