ramnit | 1008dfb1a8d36fe92e4cf732d3b3eddb5c58b7af30b3460539dcdfa80498ae50 | Triage

Submit
Reports

Overview

overview

Static

static

3

1008dfb1a8...50.dll

windows7-x64

7

1008dfb1a8...50.dll

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

1008dfb1a8d36fe92e4cf732d3b3eddb5c58b7af30b3460539dcdfa80498ae50
Size

496KB
Sample

241124-ygl5eswlew
MD5

f2613a40d3987d792798703578d712d4
SHA1

3ba8dc0438bd33a3612ffd19d9a3c0e69775171e
SHA256

1008dfb1a8d36fe92e4cf732d3b3eddb5c58b7af30b3460539dcdfa80498ae50
SHA512

8c223839e69521b6e029ef43b364c6cce183215bd3cd0c890941d7fbc75b1bc4db6a920e38d0afba8eaeff1045be533fb9602176306d127d4ea2a7a991804f63
SSDEEP

12288:1h8fZLyb9PzVMBC/HVMOp4PkxHLCYwZckMQMNZnXdDy/e:18F+Pzr/Hfp4MIYwZckMQmFNDym

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

1008dfb1a8d36fe92e4cf732d3b3eddb5c58b7af30b3460539dcdfa80498ae50.dll

Resource

win7-20241010-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

1008dfb1a8d36fe92e4cf732d3b3eddb5c58b7af30b3460539dcdfa80498ae50.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

15 signatures

150 seconds

Malware Config

Targets

- Target
  
  1008dfb1a8d36fe92e4cf732d3b3eddb5c58b7af30b3460539dcdfa80498ae50
- Size
  
  496KB
- MD5
  
  f2613a40d3987d792798703578d712d4
- SHA1
  
  3ba8dc0438bd33a3612ffd19d9a3c0e69775171e
- SHA256
  
  1008dfb1a8d36fe92e4cf732d3b3eddb5c58b7af30b3460539dcdfa80498ae50
- SHA512
  
  8c223839e69521b6e029ef43b364c6cce183215bd3cd0c890941d7fbc75b1bc4db6a920e38d0afba8eaeff1045be533fb9602176306d127d4ea2a7a991804f63
- SSDEEP
  
  12288:1h8fZLyb9PzVMBC/HVMOp4PkxHLCYwZckMQMNZnXdDy/e:18F+Pzr/Hfp4MIYwZckMQmFNDym
Score

10^/10

discovery ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy