ramnit | 897657eacd7dcc4f7269af97d227f3303350a39547deaf5872e4f9528e76d35b | Triage

Sharing

General

Target

897657eacd7dcc4f7269af97d227f3303350a39547deaf5872e4f9528e76d35b.exe
Size

38KB
Sample

241124-s55zjsspbl
MD5

3590bafab02d30113c1bd8dbad288e6c
SHA1

2946abcbbf2ed9296e5448d11cb8d5465a12e8dd
SHA256

897657eacd7dcc4f7269af97d227f3303350a39547deaf5872e4f9528e76d35b
SHA512

378c839d9190fbcb7869038a8077a28505665c9a6ef4143bc155f76d1e52bd39fab155eebb356c3d4775e84b0d3f3f5720bc841b50d786b5302b62e493967f7e
SSDEEP

768:Bs+/gMsLIn/wIj2labk+1IsceGSnkmJ0Yblr583CJrVV7CsXUSYj6m2sBVVn:WD8w22laSR0V+3CJrVdXYzJJ

Score

10^/10

ramnit banker discovery spyware stealer trojan worm

Malware Config

Targets

- Target
  
  897657eacd7dcc4f7269af97d227f3303350a39547deaf5872e4f9528e76d35b.exe
- Size
  
  38KB
- MD5
  
  3590bafab02d30113c1bd8dbad288e6c
- SHA1
  
  2946abcbbf2ed9296e5448d11cb8d5465a12e8dd
- SHA256
  
  897657eacd7dcc4f7269af97d227f3303350a39547deaf5872e4f9528e76d35b
- SHA512
  
  378c839d9190fbcb7869038a8077a28505665c9a6ef4143bc155f76d1e52bd39fab155eebb356c3d4775e84b0d3f3f5720bc841b50d786b5302b62e493967f7e
- SSDEEP
  
  768:Bs+/gMsLIn/wIj2labk+1IsceGSnkmJ0Yblr583CJrVV7CsXUSYj6m2sBVVn:WD8w22laSR0V+3CJrVdXYzJJ
Score

10^/10

ramnit banker discovery spyware stealer trojan worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanworm