ramnit | 0b7c23897f2ea2b72aeb073fe9a95856e941052ce01a2d28c711364a4dc371ee | Triage

Submit
Reports

Overview

overview

Static

static

5

0b7c23897f...eN.dll

windows7-x64

0b7c23897f...eN.dll

windows10-2004-x64

Sharing

General

Target

0b7c23897f2ea2b72aeb073fe9a95856e941052ce01a2d28c711364a4dc371eeN.exe
Size

71KB
Sample

241119-2k3hcsyqgl
MD5

5ad4ed7805bdce6c46c04856d237b670
SHA1

c1447f3eab667bc76ecd9527c922795be5db82ea
SHA256

0b7c23897f2ea2b72aeb073fe9a95856e941052ce01a2d28c711364a4dc371ee
SHA512

3dcd5b1a686d1dd6cfa0ee4137d64ccddb93caf5f053366cb5e69d9cd5240361f89239319ad2957a539301fe03d1e5f21cb59f52d8220ec5d30138c1724cf09d
SSDEEP

1536:eQUh5VR9unGw60fnHkucCP8DB59ROSqZ+FH5LTMrZd7+SY6S46:KVR9uGB0ES0l5lW+FH5/M1d7+M1

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

0b7c23897f2ea2b72aeb073fe9a95856e941052ce01a2d28c711364a4dc371eeN.dll

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

13 signatures

120 seconds

Behavioral task

behavioral2

Sample

0b7c23897f2ea2b72aeb073fe9a95856e941052ce01a2d28c711364a4dc371eeN.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

12 signatures

120 seconds

Malware Config

Targets

- Target
  
  0b7c23897f2ea2b72aeb073fe9a95856e941052ce01a2d28c711364a4dc371eeN.exe
- Size
  
  71KB
- MD5
  
  5ad4ed7805bdce6c46c04856d237b670
- SHA1
  
  c1447f3eab667bc76ecd9527c922795be5db82ea
- SHA256
  
  0b7c23897f2ea2b72aeb073fe9a95856e941052ce01a2d28c711364a4dc371ee
- SHA512
  
  3dcd5b1a686d1dd6cfa0ee4137d64ccddb93caf5f053366cb5e69d9cd5240361f89239319ad2957a539301fe03d1e5f21cb59f52d8220ec5d30138c1724cf09d
- SSDEEP
  
  1536:eQUh5VR9unGw60fnHkucCP8DB59ROSqZ+FH5LTMrZd7+SY6S46:KVR9uGB0ES0l5lW+FH5/M1d7+M1
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2024

Terms | Privacy