ramnit

General

Target

151598eacfa22a822d35a0d775b9492afd941035abdf90b6707d8bf363653db2
Size

11.4MB
Sample

230819-gzfxpahg6t
MD5

7bc0f14485349d7c5e0549069207ce53
SHA1

83064598131dbe53563244448a703282742426c1
SHA256

151598eacfa22a822d35a0d775b9492afd941035abdf90b6707d8bf363653db2
SHA512

03fa600d27b2947cc716f75e1fd853a99342b8c71c1240b610e9a0b842260984a8b81fc9b46aeb5f9bd882460b8bb5e2b32a6b982d7cc439ffe7727ff0b3b4f9
SSDEEP

196608:FjKTwWFcO9J7lU/VG204f88i0CTmKXUw8WLkBJLJk1GeYu/vxuETzo1Rgr3GMH2N:FjKTwWFcO/BU/M2RXi7SWUqW9kke1nx6

Score

10^/10

Malware Config

Targets

- Target
  
  151598eacfa22a822d35a0d775b9492afd941035abdf90b6707d8bf363653db2
- Size
  
  11.4MB
- MD5
  
  7bc0f14485349d7c5e0549069207ce53
- SHA1
  
  83064598131dbe53563244448a703282742426c1
- SHA256
  
  151598eacfa22a822d35a0d775b9492afd941035abdf90b6707d8bf363653db2
- SHA512
  
  03fa600d27b2947cc716f75e1fd853a99342b8c71c1240b610e9a0b842260984a8b81fc9b46aeb5f9bd882460b8bb5e2b32a6b982d7cc439ffe7727ff0b3b4f9
- SSDEEP
  
  196608:FjKTwWFcO9J7lU/VG204f88i0CTmKXUw8WLkBJLJk1GeYu/vxuETzo1Rgr3GMH2N:FjKTwWFcO/BU/M2RXi7SWUqW9kke1nx6
Score

10^/10

ramnit banker spyware stealer themida trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- Themida packer
  Detects Themida, an advanced Windows software protection system.
  themida
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2

T1112

Subvert Trust Controls

1

T1553

Install Root Certificate

1

T1553.004

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Themida packer

UPX packed file

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2