ramnit | 69251722b4a8b02cb6cf76e09ad540b1c48ee3b99011c291c254d9b5fde6ebb5 | Triage

Submit
Reports

Overview

overview

Static

static

3

69251722b4...5N.dll

windows7-x64

69251722b4...5N.dll

windows10-2004-x64

7

Sharing

General

Target

69251722b4a8b02cb6cf76e09ad540b1c48ee3b99011c291c254d9b5fde6ebb5N
Size

126KB
Sample

241109-zy7ccs1pcs
MD5

2adbed9104b59ab027bdf73a7647a940
SHA1

3d4c3ea40379ab74839f44046a1522741723f853
SHA256

69251722b4a8b02cb6cf76e09ad540b1c48ee3b99011c291c254d9b5fde6ebb5
SHA512

6c70a3b52fc444aa96ae60ea7ee77fa5489b2c3134e7ad75ad25a88efdcf6ae349c4be5ee983f521520f4d2a14094583a29a9abe326f5a0ff8c25c0910065776
SSDEEP

3072:w/t8SM8yXvboPKjSiADaSTIJt1g9zYfD7HYmqxLzsC8:i0PqiAOSWVrhqhh8

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

69251722b4a8b02cb6cf76e09ad540b1c48ee3b99011c291c254d9b5fde6ebb5N.dll

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

14 signatures

120 seconds

Behavioral task

behavioral2

Sample

69251722b4a8b02cb6cf76e09ad540b1c48ee3b99011c291c254d9b5fde6ebb5N.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

120 seconds

Malware Config

Targets

- Target
  
  69251722b4a8b02cb6cf76e09ad540b1c48ee3b99011c291c254d9b5fde6ebb5N
- Size
  
  126KB
- MD5
  
  2adbed9104b59ab027bdf73a7647a940
- SHA1
  
  3d4c3ea40379ab74839f44046a1522741723f853
- SHA256
  
  69251722b4a8b02cb6cf76e09ad540b1c48ee3b99011c291c254d9b5fde6ebb5
- SHA512
  
  6c70a3b52fc444aa96ae60ea7ee77fa5489b2c3134e7ad75ad25a88efdcf6ae349c4be5ee983f521520f4d2a14094583a29a9abe326f5a0ff8c25c0910065776
- SSDEEP
  
  3072:w/t8SM8yXvboPKjSiADaSTIJt1g9zYfD7HYmqxLzsC8:i0PqiAOSWVrhqhh8
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2025

Terms | Privacy