ramnit | 9902fbc3649cea6d8d4524087cadf497a79ba28d112d319b18638371608f5365 | Triage

Submit
Reports

Overview

overview

Static

static

3

9902fbc364...65.dll

windows7-x64

9902fbc364...65.dll

windows10-2004-x64

Sharing

General

Target

9902fbc3649cea6d8d4524087cadf497a79ba28d112d319b18638371608f5365.exe
Size

140KB
Sample

241119-sh37fasmaq
MD5

1af81fe3fb1fa2531e0ebc9e97979785
SHA1

b715ef91c5611fee9e5357767e11422f37a68ba0
SHA256

9902fbc3649cea6d8d4524087cadf497a79ba28d112d319b18638371608f5365
SHA512

b3c44bdd0152ac617ceeb2bda3f195fbdc7d49be150e065c1e56984ba1895969846550ea9be409f2e1d117d4cddeb325be788fa144b717d88eace64d7defd746
SSDEEP

1536:rBC8cGhP4h1QlBR5szrAMty3KntgmaGSR1EbsQI1mhiMBUroMhFP:rBC81V4Iz0r7ty3KlaPEbsQIxrDfP

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

9902fbc3649cea6d8d4524087cadf497a79ba28d112d319b18638371608f5365.dll

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

13 signatures

120 seconds

Behavioral task

behavioral2

Sample

9902fbc3649cea6d8d4524087cadf497a79ba28d112d319b18638371608f5365.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

12 signatures

120 seconds

Malware Config

Targets

- Target
  
  9902fbc3649cea6d8d4524087cadf497a79ba28d112d319b18638371608f5365.exe
- Size
  
  140KB
- MD5
  
  1af81fe3fb1fa2531e0ebc9e97979785
- SHA1
  
  b715ef91c5611fee9e5357767e11422f37a68ba0
- SHA256
  
  9902fbc3649cea6d8d4524087cadf497a79ba28d112d319b18638371608f5365
- SHA512
  
  b3c44bdd0152ac617ceeb2bda3f195fbdc7d49be150e065c1e56984ba1895969846550ea9be409f2e1d117d4cddeb325be788fa144b717d88eace64d7defd746
- SSDEEP
  
  1536:rBC8cGhP4h1QlBR5szrAMty3KntgmaGSR1EbsQI1mhiMBUroMhFP:rBC81V4Iz0r7ty3KlaPEbsQIxrDfP
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy