ramnit | 0e11246d31399e037d4e8c0b168419b09084d3b815f069c8b6a2947900f48d4e | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

0e11246d31...4e.exe

windows7-x64

8

0e11246d31...4e.exe

windows10-2004-x64

Sharing

General

Target

0e11246d31399e037d4e8c0b168419b09084d3b815f069c8b6a2947900f48d4e
Size

1.3MB
Sample

221204-c1bxxahg39
MD5

2ad2fbe4509e650c839ea7bc1f6fdd14
SHA1

e654cd67c50a97267b2bf2eec66f643a28e60d68
SHA256

0e11246d31399e037d4e8c0b168419b09084d3b815f069c8b6a2947900f48d4e
SHA512

6ff772151351d244fe4d054e17f9fcde4f6899aedfe7f80ee1994e21db87dba2c53abfb12bcf878414745c689b2a5180ea0a972d816a348bbf1c67b0e0baca4e
SSDEEP

12288:KqOPajQUXXP8QvLWFx6Mo5rippDC7ee1hpls4Ey+XQgAQ0hKJieRHL3:KnajQEPnvg6PhWDC750XgKJ3r3

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

0e11246d31399e037d4e8c0b168419b09084d3b815f069c8b6a2947900f48d4e.exe

Resource

win7-20220812-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

0e11246d31399e037d4e8c0b168419b09084d3b815f069c8b6a2947900f48d4e.exe

Resource

win10v2004-20220812-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  0e11246d31399e037d4e8c0b168419b09084d3b815f069c8b6a2947900f48d4e
- Size
  
  1.3MB
- MD5
  
  2ad2fbe4509e650c839ea7bc1f6fdd14
- SHA1
  
  e654cd67c50a97267b2bf2eec66f643a28e60d68
- SHA256
  
  0e11246d31399e037d4e8c0b168419b09084d3b815f069c8b6a2947900f48d4e
- SHA512
  
  6ff772151351d244fe4d054e17f9fcde4f6899aedfe7f80ee1994e21db87dba2c53abfb12bcf878414745c689b2a5180ea0a972d816a348bbf1c67b0e0baca4e
- SSDEEP
  
  12288:KqOPajQUXXP8QvLWFx6Mo5rippDC7ee1hpls4Ey+XQgAQ0hKJieRHL3:KnajQEPnvg6PhWDC750XgKJ3r3
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy