neshta | 6ba13f8615f2fd53949fb243d901e453c0c0ee789e85e29a4a15596e8a2fd7ff | Triage

Submit
Reports

Overview

overview

Static

static

6ba13f8615...ff.exe

windows7-x64

6ba13f8615...ff.exe

windows10-2004-x64

5

Sharing

General

Target

6ba13f8615f2fd53949fb243d901e453c0c0ee789e85e29a4a15596e8a2fd7ff
Size

225KB
Sample

241018-2we67ssgrg
MD5

2bdb5081020a5953fbea8672f5f51e64
SHA1

1da6c6b09bdc7070e7dab2d2161ebf3c4e1d0e48
SHA256

6ba13f8615f2fd53949fb243d901e453c0c0ee789e85e29a4a15596e8a2fd7ff
SHA512

5196a32192eef86a06a115b8e473cb001202727e1059d6bbfcff49b105da76cddfd25d7ed12066128f1b305dd4765c6eb2a3726ef9ffff1f85acab060baef9f0
SSDEEP

3072:YwV4OgSzBmh04eZFkz3Rr0gwGj9Tf8Jr85ChwV4OgSzBmh0dwV4OgSzBmh0F:YMzzILGFkzhr0pGj9ol9hMzzIgMzzI0

Score

10^/10

neshta ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

6ba13f8615f2fd53949fb243d901e453c0c0ee789e85e29a4a15596e8a2fd7ff.exe

Resource

win7-20241010-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

6ba13f8615f2fd53949fb243d901e453c0c0ee789e85e29a4a15596e8a2fd7ff.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  6ba13f8615f2fd53949fb243d901e453c0c0ee789e85e29a4a15596e8a2fd7ff
- Size
  
  225KB
- MD5
  
  2bdb5081020a5953fbea8672f5f51e64
- SHA1
  
  1da6c6b09bdc7070e7dab2d2161ebf3c4e1d0e48
- SHA256
  
  6ba13f8615f2fd53949fb243d901e453c0c0ee789e85e29a4a15596e8a2fd7ff
- SHA512
  
  5196a32192eef86a06a115b8e473cb001202727e1059d6bbfcff49b105da76cddfd25d7ed12066128f1b305dd4765c6eb2a3726ef9ffff1f85acab060baef9f0
- SSDEEP
  
  3072:YwV4OgSzBmh04eZFkz3Rr0gwGj9Tf8Jr85ChwV4OgSzBmh0dwV4OgSzBmh0F:YMzzILGFkzhr0pGj9ol9hMzzIgMzzI0
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy