ramnit | 16b25b078ddd1c6077520e0512fc8a8f5827309cb5ede8fb962d25351dd4c887 | Triage

Submit
Reports

Overview

overview

Static

static

5

16b25b078d...87.exe

windows7-x64

16b25b078d...87.exe

windows10-2004-x64

5

Sharing

General

Target

16b25b078ddd1c6077520e0512fc8a8f5827309cb5ede8fb962d25351dd4c887
Size

225KB
Sample

241216-ynq2ysypf1
MD5

0a0ea02532963b365f07c82475547a51
SHA1

4c9864665f0ef527f24042d51c5513863f402d92
SHA256

16b25b078ddd1c6077520e0512fc8a8f5827309cb5ede8fb962d25351dd4c887
SHA512

64a7ccda81456775a222e7139185d05521888d172646fa3692dd8488dff5cd0149ea0e9c50ec58db52c43b601c16bdf175dac48e647b39416bb0ef629f2bcc9a
SSDEEP

3072:fL2/2qHOMhMFwgqGGtVq4ZtuBU8yl8VwAxEA8r:AHPh8PGbqWCVEA8

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

16b25b078ddd1c6077520e0512fc8a8f5827309cb5ede8fb962d25351dd4c887.exe

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

16b25b078ddd1c6077520e0512fc8a8f5827309cb5ede8fb962d25351dd4c887.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  
  16b25b078ddd1c6077520e0512fc8a8f5827309cb5ede8fb962d25351dd4c887
- Size
  
  225KB
- MD5
  
  0a0ea02532963b365f07c82475547a51
- SHA1
  
  4c9864665f0ef527f24042d51c5513863f402d92
- SHA256
  
  16b25b078ddd1c6077520e0512fc8a8f5827309cb5ede8fb962d25351dd4c887
- SHA512
  
  64a7ccda81456775a222e7139185d05521888d172646fa3692dd8488dff5cd0149ea0e9c50ec58db52c43b601c16bdf175dac48e647b39416bb0ef629f2bcc9a
- SSDEEP
  
  3072:fL2/2qHOMhMFwgqGGtVq4ZtuBU8yl8VwAxEA8r:AHPh8PGbqWCVEA8
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy