Overview

overview

10

Static

static

3

2024-11-18...it.exe

windows7-x64

10

2024-11-18...it.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-11-18_3ec89832c6eac179cfc2dc1a9e5df81a_icedid_ramnit

  • Size

    344KB

  • Sample

    241118-z8f8xsvqas

  • MD5

    3ec89832c6eac179cfc2dc1a9e5df81a

  • SHA1

    5defcb6766d1644b07e8eef35c6937d00a0e1d9f

  • SHA256

    868182584eea4e4b24a5a69071ed8bc5d6d2a416a2a7ce3566f63b091fcc60f2

  • SHA512

    fc7450ffbbb288f4d0042891c2b818ae1ead2ef964c19b2653665c664104bf5a6fc0f4d86d9edf3fc35dcbc4a039229ee0bb2a51d7abfdf41a17589e382cff93

  • SSDEEP

    6144:Z8ZvxXc5mQ8kBf/OQqXtFP1BTdsxL4LFidmpGjMqwRBQFK7:KvJcIQ8kBTqbvesFNWLrFK7

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      2024-11-18_3ec89832c6eac179cfc2dc1a9e5df81a_icedid_ramnit

    • Size

      344KB

    • MD5

      3ec89832c6eac179cfc2dc1a9e5df81a

    • SHA1

      5defcb6766d1644b07e8eef35c6937d00a0e1d9f

    • SHA256

      868182584eea4e4b24a5a69071ed8bc5d6d2a416a2a7ce3566f63b091fcc60f2

    • SHA512

      fc7450ffbbb288f4d0042891c2b818ae1ead2ef964c19b2653665c664104bf5a6fc0f4d86d9edf3fc35dcbc4a039229ee0bb2a51d7abfdf41a17589e382cff93

    • SSDEEP

      6144:Z8ZvxXc5mQ8kBf/OQqXtFP1BTdsxL4LFidmpGjMqwRBQFK7:KvJcIQ8kBTqbvesFNWLrFK7

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks