ramnit | 899024f807edc97dd31e840d0db459ef2f26cbf9f7472b5d74c7905897812ac4 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

899024f807...c4.dll

windows7-x64

899024f807...c4.dll

windows10-2004-x64

Sharing

General

Target

899024f807edc97dd31e840d0db459ef2f26cbf9f7472b5d74c7905897812ac4
Size

1022KB
Sample

231113-r4x2wadf23
MD5

23aeeac9e1fc70cb94305c8a4580d65e
SHA1

792e3e656090c1c69777fa2793a15b070a9e9aeb
SHA256

899024f807edc97dd31e840d0db459ef2f26cbf9f7472b5d74c7905897812ac4
SHA512

e990805fb43c8f3e846a67a1e8e493c77eb251c9624cc4c76ec002469efa648a14b93536a4a7af343ba3240ae12962b018f0a4edc1a3ce98bb4e295a8bc2bf44
SSDEEP

24576:avRSE4AwGS+/O00kLnW0FBhNoxRiiI8Msr:avc/A3p/OB4rk1Ms

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

899024f807edc97dd31e840d0db459ef2f26cbf9f7472b5d74c7905897812ac4.dll

Resource

win7-20231023-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

899024f807edc97dd31e840d0db459ef2f26cbf9f7472b5d74c7905897812ac4.dll

Resource

win10v2004-20231023-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  899024f807edc97dd31e840d0db459ef2f26cbf9f7472b5d74c7905897812ac4
- Size
  
  1022KB
- MD5
  
  23aeeac9e1fc70cb94305c8a4580d65e
- SHA1
  
  792e3e656090c1c69777fa2793a15b070a9e9aeb
- SHA256
  
  899024f807edc97dd31e840d0db459ef2f26cbf9f7472b5d74c7905897812ac4
- SHA512
  
  e990805fb43c8f3e846a67a1e8e493c77eb251c9624cc4c76ec002469efa648a14b93536a4a7af343ba3240ae12962b018f0a4edc1a3ce98bb4e295a8bc2bf44
- SSDEEP
  
  24576:avRSE4AwGS+/O00kLnW0FBhNoxRiiI8Msr:avc/A3p/OB4rk1Ms
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy