ramnit | a022ffd9d1a8b6b14494d5bade8cf38d1145e97c507174841eeabcb945982a71 | Triage

Submit
Reports

Overview

overview

Static

static

3

a022ffd9d1...71.exe

windows7-x64

a022ffd9d1...71.exe

windows10-2004-x64

Sharing

General

Target

a022ffd9d1a8b6b14494d5bade8cf38d1145e97c507174841eeabcb945982a71
Size

130KB
Sample

240921-dtcrassfmn
MD5

d91004262f9bdcc37809b7a0e327c796
SHA1

ba025f8d658cf3c2feaac5e50f48df382950a955
SHA256

a022ffd9d1a8b6b14494d5bade8cf38d1145e97c507174841eeabcb945982a71
SHA512

b310531e5f6ca3323d2c4035de0d6515b25838cc28f0d8f86f2a4da1419f7994f2bb3fc5a73f4e2cb5e7af0a6d7b366c7d4969f706206755f0c0bc95057eb906
SSDEEP

3072:bftffjmNbjRS+oSODRMl67Sxhrnd89ayHyBT9WKe5HL:bVfjmNzoSODi8GxhrdiaygsKQHL

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

a022ffd9d1a8b6b14494d5bade8cf38d1145e97c507174841eeabcb945982a71.exe

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

a022ffd9d1a8b6b14494d5bade8cf38d1145e97c507174841eeabcb945982a71.exe

Resource

win10v2004-20240802-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  a022ffd9d1a8b6b14494d5bade8cf38d1145e97c507174841eeabcb945982a71
- Size
  
  130KB
- MD5
  
  d91004262f9bdcc37809b7a0e327c796
- SHA1
  
  ba025f8d658cf3c2feaac5e50f48df382950a955
- SHA256
  
  a022ffd9d1a8b6b14494d5bade8cf38d1145e97c507174841eeabcb945982a71
- SHA512
  
  b310531e5f6ca3323d2c4035de0d6515b25838cc28f0d8f86f2a4da1419f7994f2bb3fc5a73f4e2cb5e7af0a6d7b366c7d4969f706206755f0c0bc95057eb906
- SSDEEP
  
  3072:bftffjmNbjRS+oSODRMl67Sxhrnd89ayHyBT9WKe5HL:bVfjmNzoSODi8GxhrdiaygsKQHL
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy