ramnit

General

Target

NEAS.b553f76dc32d923e4ba0be2ea9f417f0.exe
Size

2.6MB
Sample

231014-xvag4sfb5y
MD5

b553f76dc32d923e4ba0be2ea9f417f0
SHA1

480508250d4ea2ef901a32179912d92b182dc249
SHA256

488e9a45adc7bfd3888ae86bd6f482f69f0fd142f92974eda2c55c7cd0b7c2e0
SHA512

ad0c1620c255d76e2397d70721de63970c989f393dca7bed9ab9e7381762caa4e6baee440500c4c7ddacd9bb21592d6819257c46cb437aeb1fc7c82d863972b8
SSDEEP

49152:+h+ZkldoPK8Yaiaa8wVJqEbZBWipyDhy98oKmX6M2/sK9uql81tHG:X2cPK8xBgC7hy9lKmXNdYx8jHG

Score

10^/10

Malware Config

Targets

- Target
  
  NEAS.b553f76dc32d923e4ba0be2ea9f417f0.exe
- Size
  
  2.6MB
- MD5
  
  b553f76dc32d923e4ba0be2ea9f417f0
- SHA1
  
  480508250d4ea2ef901a32179912d92b182dc249
- SHA256
  
  488e9a45adc7bfd3888ae86bd6f482f69f0fd142f92974eda2c55c7cd0b7c2e0
- SHA512
  
  ad0c1620c255d76e2397d70721de63970c989f393dca7bed9ab9e7381762caa4e6baee440500c4c7ddacd9bb21592d6819257c46cb437aeb1fc7c82d863972b8
- SSDEEP
  
  49152:+h+ZkldoPK8Yaiaa8wVJqEbZBWipyDhy98oKmX6M2/sK9uql81tHG:X2cPK8xBgC7hy9lKmXNdYx8jHG
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops startup file

Executes dropped EXE

Loads dropped DLL

UPX packed file

Enumerates connected drives

AutoIT Executable

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2