ramnit | d0df8fac2089608a6b5dee7132981e88ab3b98178aff1d3fe7e003d388541e24 | Triage

Submit
Reports

Overview

overview

Static

static

7

d0df8fac20...24.exe

windows10-2004-x64

Sharing

General

Target

d0df8fac2089608a6b5dee7132981e88ab3b98178aff1d3fe7e003d388541e24.exe
Size

128KB
Sample

240726-gtpmmstfnc
MD5

9e6bb4e8bd64aa09774157b0c0d5c496
SHA1

0e6e80b5a464528c473465cc0b8fe8b24cdee8cc
SHA256

d0df8fac2089608a6b5dee7132981e88ab3b98178aff1d3fe7e003d388541e24
SHA512

3b51064faa2e4ede8000990285b17955440a0df17d1e9d4fd1cd5e1a54383066a7dda09e1ba88c323fd9b9e43cbf8b36b559a89946021d073a2802edc87c6bb1
SSDEEP

3072:5ROzoTq0+RO7IwnY/0EMcDtaLEJVwgFlVGCH:HkdNwB+02DjwgI

Score

10^/10

ramnit aspackv2 banker discovery spyware stealer trojan upx worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

d0df8fac2089608a6b5dee7132981e88ab3b98178aff1d3fe7e003d388541e24.exe

Resource

win10v2004-20240704-en

ramnit aspackv2 banker discovery spyware stealer trojan upx worm

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  d0df8fac2089608a6b5dee7132981e88ab3b98178aff1d3fe7e003d388541e24.exe
- Size
  
  128KB
- MD5
  
  9e6bb4e8bd64aa09774157b0c0d5c496
- SHA1
  
  0e6e80b5a464528c473465cc0b8fe8b24cdee8cc
- SHA256
  
  d0df8fac2089608a6b5dee7132981e88ab3b98178aff1d3fe7e003d388541e24
- SHA512
  
  3b51064faa2e4ede8000990285b17955440a0df17d1e9d4fd1cd5e1a54383066a7dda09e1ba88c323fd9b9e43cbf8b36b559a89946021d073a2802edc87c6bb1
- SSDEEP
  
  3072:5ROzoTq0+RO7IwnY/0EMcDtaLEJVwgFlVGCH:HkdNwB+02DjwgI
Score

10^/10

ramnit aspackv2 banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitaspackv2bankerdiscoveryspywarestealertrojanupxworm

© 2018-2024

Terms | Privacy