Overview

overview

10

Static

static

3

2024-10-02...it.exe

windows7-x64

10

2024-10-02...it.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-10-02_ffa03ba778330e2d14419fb10f967e34_mafia_ramnit

  • Size

    344KB

  • Sample

    241002-x33tmawemh

  • MD5

    ffa03ba778330e2d14419fb10f967e34

  • SHA1

    5ecd9824c804ce3a47d6d3cf2d99e33bdc2a433f

  • SHA256

    5ddfa26a51a4c10b09d9ac9c62e8981b293344f19f3812d9b77e3cf33a7aa183

  • SHA512

    fa11b47c4a057240d80ca75765fd6503cc60fa07e025641299158415aa67dd4cc559c5bfbe7d2c40812631ae1e4b2664f0b6ce5acc202aa99e16f96bcdcaf718

  • SSDEEP

    6144:o5ZFn5ui1oXpvT3hnyX2+Bf1cPOtJF8aiMhSY4yTHwsGHTeL:o95/1oXxTRnO2+Bf0OWaiMhSYnH1UA

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      2024-10-02_ffa03ba778330e2d14419fb10f967e34_mafia_ramnit

    • Size

      344KB

    • MD5

      ffa03ba778330e2d14419fb10f967e34

    • SHA1

      5ecd9824c804ce3a47d6d3cf2d99e33bdc2a433f

    • SHA256

      5ddfa26a51a4c10b09d9ac9c62e8981b293344f19f3812d9b77e3cf33a7aa183

    • SHA512

      fa11b47c4a057240d80ca75765fd6503cc60fa07e025641299158415aa67dd4cc559c5bfbe7d2c40812631ae1e4b2664f0b6ce5acc202aa99e16f96bcdcaf718

    • SSDEEP

      6144:o5ZFn5ui1oXpvT3hnyX2+Bf1cPOtJF8aiMhSY4yTHwsGHTeL:o95/1oXxTRnO2+Bf0OWaiMhSYnH1UA

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks