ramnit | decac741503bd322dc2fed87e96fce337cd8f8959c5a35c0fd8e86b33a01b00c | Triage

Submit
Reports

Overview

overview

Static

static

3

67b7286d6a...f5.dll

windows7-x64

67b7286d6a...f5.dll

windows10-2004-x64

7

Sharing

General

Target

67b7286d6a4146ce6e06c3fc9088d5f5
Size

196KB
Sample

240119-qkxfkafcg9
MD5

67b7286d6a4146ce6e06c3fc9088d5f5
SHA1

82eeb141904c83b0561979d8e52ec2374d04cbfc
SHA256

decac741503bd322dc2fed87e96fce337cd8f8959c5a35c0fd8e86b33a01b00c
SHA512

537820b4a34a3af6e76908901460462d3556043890bbc24d25c2521a762efa4662c08a913c84a5db8af54c28ad6caafaf3e3466ec05d49c0596a13e50c8c2060
SSDEEP

3072:0SwUV5vnt3+Vaew/ME2my+Oapb7f8+pP4HZwScsOksw88Yc05hXqkJ2UA1khDg2u:eUVvXxRb7lP+ZwSoA880h6kMUAmzu

Score

10^/10

ramnit adware banker spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

67b7286d6a4146ce6e06c3fc9088d5f5.dll

Resource

win7-20231215-en

ramnit adware banker spyware stealer trojan upx worm

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

67b7286d6a4146ce6e06c3fc9088d5f5.dll

Resource

win10v2004-20231222-en

adware stealer upx

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  67b7286d6a4146ce6e06c3fc9088d5f5
- Size
  
  196KB
- MD5
  
  67b7286d6a4146ce6e06c3fc9088d5f5
- SHA1
  
  82eeb141904c83b0561979d8e52ec2374d04cbfc
- SHA256
  
  decac741503bd322dc2fed87e96fce337cd8f8959c5a35c0fd8e86b33a01b00c
- SHA512
  
  537820b4a34a3af6e76908901460462d3556043890bbc24d25c2521a762efa4662c08a913c84a5db8af54c28ad6caafaf3e3466ec05d49c0596a13e50c8c2060
- SSDEEP
  
  3072:0SwUV5vnt3+Vaew/ME2my+Oapb7f8+pP4HZwScsOksw88Yc05hXqkJ2UA1khDg2u:eUVvXxRb7lP+ZwSoA880h6kMUAmzu
Score

10^/10

ramnit adware banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitadwarebankerspywarestealertrojanupxworm

behavioral2

adwarestealerupx

© 2018-2024

Terms | Privacy