ramnit | 7395e16192b4e5afc20c54da5494d4785f9c76f2810cbd67c5cf128b8da3f703 | Triage

Submit
Reports

Overview

overview

Static

static

3

7395e16192...3N.exe

windows7-x64

7395e16192...3N.exe

windows10-2004-x64

Sharing

General

Target

7395e16192b4e5afc20c54da5494d4785f9c76f2810cbd67c5cf128b8da3f703N.exe
Size

1.4MB
Sample

241211-t2z5kavpfq
MD5

142bb5493b521f174a35838b7192bfd0
SHA1

dc3558d0e07d5b1c9d50e6feb07bf3a872a73f42
SHA256

7395e16192b4e5afc20c54da5494d4785f9c76f2810cbd67c5cf128b8da3f703
SHA512

9cb0f4dcea22b753b4821c7f3741727a993f68e0e38502096ec60168af29a333e0491ba1d2c23159c070cdc02e78b88f218dd7e14bb3993b2fcbadf1a84a141f
SSDEEP

24576:EpU3n5+rG/LzOaLahrD8hcrHhjN/NnMTkKPZ6WSocKEs:8UXMuXOhrgh+HnoZ6WJct

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

7395e16192b4e5afc20c54da5494d4785f9c76f2810cbd67c5cf128b8da3f703N.exe

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

120 seconds

Behavioral task

behavioral2

Sample

7395e16192b4e5afc20c54da5494d4785f9c76f2810cbd67c5cf128b8da3f703N.exe

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

11 signatures

120 seconds

Malware Config

Targets

- Target
  
  7395e16192b4e5afc20c54da5494d4785f9c76f2810cbd67c5cf128b8da3f703N.exe
- Size
  
  1.4MB
- MD5
  
  142bb5493b521f174a35838b7192bfd0
- SHA1
  
  dc3558d0e07d5b1c9d50e6feb07bf3a872a73f42
- SHA256
  
  7395e16192b4e5afc20c54da5494d4785f9c76f2810cbd67c5cf128b8da3f703
- SHA512
  
  9cb0f4dcea22b753b4821c7f3741727a993f68e0e38502096ec60168af29a333e0491ba1d2c23159c070cdc02e78b88f218dd7e14bb3993b2fcbadf1a84a141f
- SSDEEP
  
  24576:EpU3n5+rG/LzOaLahrD8hcrHhjN/NnMTkKPZ6WSocKEs:8UXMuXOhrgh+HnoZ6WJct
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy