Overview

overview

10

Static

static

3

2024-11-25...it.exe

windows7-x64

10

2024-11-25...it.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-25_0a9a3ef7d589e714186bdf5e054a25c7_mafia_ramnit

  • Size

    2.0MB

  • Sample

    241125-s6f2tatpas

  • MD5

    0a9a3ef7d589e714186bdf5e054a25c7

  • SHA1

    cf83774c0d01b203e3e12094ec1cec3abeba359b

  • SHA256

    b1056b403a3d4b1b93c72307f87f7659894629b743beb845c91fd76ae966df11

  • SHA512

    5f8a1e83acb96c7deb13eaa87ad5c62c7a616307491ca1c3f796f01eee5efd5d993dd601c686c338752ad615620b298a069298b9fa4f68281e45a86254fad123

  • SSDEEP

    49152:rzByce3/IBRpekqSkOdx+higFqtrySAGBiY56DNbp9/TFwGUaVDMLpNbQVoD+0W:rzBc/IBBqSkOdxHgOrySAGBr56DNbp9O

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      2024-11-25_0a9a3ef7d589e714186bdf5e054a25c7_mafia_ramnit

    • Size

      2.0MB

    • MD5

      0a9a3ef7d589e714186bdf5e054a25c7

    • SHA1

      cf83774c0d01b203e3e12094ec1cec3abeba359b

    • SHA256

      b1056b403a3d4b1b93c72307f87f7659894629b743beb845c91fd76ae966df11

    • SHA512

      5f8a1e83acb96c7deb13eaa87ad5c62c7a616307491ca1c3f796f01eee5efd5d993dd601c686c338752ad615620b298a069298b9fa4f68281e45a86254fad123

    • SSDEEP

      49152:rzByce3/IBRpekqSkOdx+higFqtrySAGBiY56DNbp9/TFwGUaVDMLpNbQVoD+0W:rzBc/IBBqSkOdxHgOrySAGBr56DNbp9O

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks