ramnit

General

Target
c9a9f77499cefd78fec07f20c715e318c8c557cceb53934c7c82347563aa7aa0
Size 498KB
Sample240429-28c8dadc96
SHA256 c9a9f77499cefd78fec07f20c715e318c8c557cceb53934c7c82347563aa7aa0
MD5 a73dbd8928f706068b73ec32594ea4b0
SHA1 3e6f873185a252034294b1fc2f2f0efe2e1ea244
SHA512 d4f2beff84fd44a77a0e15f8435554847eb4839f63e49db6cfb78edf67723492d652c1789edcfc14360043bb1aa21b2b3329401763bc9ffd828696b75a2cdfee
SSDEEP 12288:+7+lV+++cWNRLv7kP2S2IuzI/oS0E7Jw:+7V++rbq29IwE7u
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  c9a9f77499cefd78fec07f20c715e318c8c557cceb53934c7c82347563aa7aa0
- Size 498KB
- SHA256 c9a9f77499cefd78fec07f20c715e318c8c557cceb53934c7c82347563aa7aa0
- MD5 a73dbd8928f706068b73ec32594ea4b0
- SHA1 3e6f873185a252034294b1fc2f2f0efe2e1ea244
- SHA512 d4f2beff84fd44a77a0e15f8435554847eb4839f63e49db6cfb78edf67723492d652c1789edcfc14360043bb1aa21b2b3329401763bc9ffd828696b75a2cdfee
- SSDEEP 12288:+7+lV+++cWNRLv7kP2S2IuzI/oS0E7Jw:+7V++rbq29IwE7u
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Deletes itself

Executes dropped EXE

Loads dropped DLL

UPX packed file

Enumerates connected drives

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2