ramnit | f1055a713baebc863c92d5e9b70c83b4043a9c3b5975fd63683421d46988bfcb | Triage

Submit
Reports

Overview

overview

Static

static

7

f1055a713b...cb.exe

windows7-x64

f1055a713b...cb.exe

windows10-2004-x64

Sharing

General

Target

f1055a713baebc863c92d5e9b70c83b4043a9c3b5975fd63683421d46988bfcb.exe
Size

116KB
Sample

230405-m6zw2aea75
MD5

55e5647a4cf23700abb43e04349af7ff
SHA1

4fbf606c1dd07729bdd5974b7660dd66d7ea6dd9
SHA256

f1055a713baebc863c92d5e9b70c83b4043a9c3b5975fd63683421d46988bfcb
SHA512

086e98b6f4bb96a2f59be2a53c3134424efa56d631938477ba42e6e08f79c2f870a5cbb73be64c00aeea13852d5179600fbbbf055224efbab1ade19a36e5c2b9
SSDEEP

1536:V+hzRsibKplyXTq8OGRnsPFG+RODTb7MXL5uXZnzEYNlcVQIFkbq/p23JAMBTqJd:gROzoTq0+RO7IwnYu6VHir3J2qed

Score

10^/10

ramnit banker evasion spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

f1055a713baebc863c92d5e9b70c83b4043a9c3b5975fd63683421d46988bfcb.exe

Resource

win7-20230220-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

f1055a713baebc863c92d5e9b70c83b4043a9c3b5975fd63683421d46988bfcb.exe

Resource

win10v2004-20230220-en

ramnit banker evasion spyware stealer trojan upx worm

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  f1055a713baebc863c92d5e9b70c83b4043a9c3b5975fd63683421d46988bfcb.exe
- Size
  
  116KB
- MD5
  
  55e5647a4cf23700abb43e04349af7ff
- SHA1
  
  4fbf606c1dd07729bdd5974b7660dd66d7ea6dd9
- SHA256
  
  f1055a713baebc863c92d5e9b70c83b4043a9c3b5975fd63683421d46988bfcb
- SHA512
  
  086e98b6f4bb96a2f59be2a53c3134424efa56d631938477ba42e6e08f79c2f870a5cbb73be64c00aeea13852d5179600fbbbf055224efbab1ade19a36e5c2b9
- SSDEEP
  
  1536:V+hzRsibKplyXTq8OGRnsPFG+RODTb7MXL5uXZnzEYNlcVQIFkbq/p23JAMBTqJd:gROzoTq0+RO7IwnYu6VHir3J2qed
Score

10^/10

ramnit banker spyware stealer trojan upx worm evasion
- Modifies firewall policy service
  evasion
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Drops file in Drivers directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerevasionspywarestealertrojanupxworm

© 2018-2024

Terms | Privacy