ramnit | da2d7245abf8124c54ff551a2be3f59e9c68377659f45baa83180d14375df402 | Triage

Submit
Reports

Overview

overview

Static

static

3

da2d7245ab...02.dll

windows7-x64

da2d7245ab...02.dll

windows10-2004-x64

Sharing

General

Target

da2d7245abf8124c54ff551a2be3f59e9c68377659f45baa83180d14375df402.exe
Size

435KB
Sample

241118-t84fkazqb1
MD5

7344a89e1663417a3d7b142764224445
SHA1

edc7cf66d2a06dd0fbed0da1d3b980038a0d8027
SHA256

da2d7245abf8124c54ff551a2be3f59e9c68377659f45baa83180d14375df402
SHA512

024ce0bc4c670fa99c2a179a7868d827773f086437c00a5da7ac2627f7c56676484ae6f993ed4cf2f6d4855cbed9c116ef891deecb796f61a459679bc20cda4b
SSDEEP

6144:AmxIbni2hn/hZm8XqyQFAal+BtsnA6C4Xqu4G/LzliJacgQIxrR:Axni2h/hZm8XqyQFAu+nGA+xiJ3gQa

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

da2d7245abf8124c54ff551a2be3f59e9c68377659f45baa83180d14375df402.dll

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

13 signatures

120 seconds

Behavioral task

behavioral2

Sample

da2d7245abf8124c54ff551a2be3f59e9c68377659f45baa83180d14375df402.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

13 signatures

120 seconds

Malware Config

Targets

- Target
  
  da2d7245abf8124c54ff551a2be3f59e9c68377659f45baa83180d14375df402.exe
- Size
  
  435KB
- MD5
  
  7344a89e1663417a3d7b142764224445
- SHA1
  
  edc7cf66d2a06dd0fbed0da1d3b980038a0d8027
- SHA256
  
  da2d7245abf8124c54ff551a2be3f59e9c68377659f45baa83180d14375df402
- SHA512
  
  024ce0bc4c670fa99c2a179a7868d827773f086437c00a5da7ac2627f7c56676484ae6f993ed4cf2f6d4855cbed9c116ef891deecb796f61a459679bc20cda4b
- SSDEEP
  
  6144:AmxIbni2hn/hZm8XqyQFAal+BtsnA6C4Xqu4G/LzliJacgQIxrR:Axni2h/hZm8XqyQFAu+nGA+xiJ3gQa
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2024

Terms | Privacy