ramnit | 3ff07b6bc1b1a21a83398b17ce9e98b2ea6e38b810260e63bcf3582556c12e2d | Triage

Submit
Reports

Overview

overview

Static

static

1

7aa0d6b672...4.html

windows7-x64

7aa0d6b672...4.html

windows10-2004-x64

1

Sharing

General

Target

7aa0d6b672690df3be9dddedfedaa6f4.bin
Size

158KB
Sample

240529-cpr5raee8s
MD5

7aa0d6b672690df3be9dddedfedaa6f4
SHA1

aa640b63a0f4d436ed5d7897d93cd0a55fbf7fc8
SHA256

3ff07b6bc1b1a21a83398b17ce9e98b2ea6e38b810260e63bcf3582556c12e2d
SHA512

74020166c21703d505dc375d5b656bab7d9c6e520e570b88f80cc5cd0215a68f581d857a44c4aa4c52e074848e143d81459e9f38f59775e78a7618bb78f68880
SSDEEP

1536:iyRTLjNE5zSscDxqrkOrjgyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09M:iAozn/gyfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

7aa0d6b672690df3be9dddedfedaa6f4.html

Resource

win7-20240221-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

7aa0d6b672690df3be9dddedfedaa6f4.html

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  7aa0d6b672690df3be9dddedfedaa6f4.bin
- Size
  
  158KB
- MD5
  
  7aa0d6b672690df3be9dddedfedaa6f4
- SHA1
  
  aa640b63a0f4d436ed5d7897d93cd0a55fbf7fc8
- SHA256
  
  3ff07b6bc1b1a21a83398b17ce9e98b2ea6e38b810260e63bcf3582556c12e2d
- SHA512
  
  74020166c21703d505dc375d5b656bab7d9c6e520e570b88f80cc5cd0215a68f581d857a44c4aa4c52e074848e143d81459e9f38f59775e78a7618bb78f68880
- SSDEEP
  
  1536:iyRTLjNE5zSscDxqrkOrjgyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09M:iAozn/gyfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy