ramnit | 01a488fab72eb83b57323b7aeeb8a7989a20975bb7cc035f8d84dd14ac349541 | Triage

Submit
Reports

Overview

overview

Static

static

3

01a488fab7...1N.exe

windows7-x64

01a488fab7...1N.exe

windows10-2004-x64

7

Sharing

General

Target

01a488fab72eb83b57323b7aeeb8a7989a20975bb7cc035f8d84dd14ac349541N.exe
Size

350KB
Sample

241217-me8pvsxqgn
MD5

0e1092371876b363945a914731d9ab70
SHA1

3d9fc87f11fb3b44e469886e03c8b210e05e3ef4
SHA256

01a488fab72eb83b57323b7aeeb8a7989a20975bb7cc035f8d84dd14ac349541
SHA512

5c0dd2b734ae26f89300047cfe148d98e24ece0b00adfb8b17f20e05ff06ea275714acac670ead13ebd0afbfa1a5622bc69580c6fc984c6f7f52d102c2c1bbd8
SSDEEP

6144:loGhpuBMG29Gt6I/pPo486MAwA3l1AiE56:lppu6G29Gt62PoKRl1456

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

01a488fab72eb83b57323b7aeeb8a7989a20975bb7cc035f8d84dd14ac349541N.exe

Resource

win7-20240729-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

120 seconds

Behavioral task

behavioral2

Sample

01a488fab72eb83b57323b7aeeb8a7989a20975bb7cc035f8d84dd14ac349541N.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

5 signatures

120 seconds

Malware Config

Targets

- Target
  
  01a488fab72eb83b57323b7aeeb8a7989a20975bb7cc035f8d84dd14ac349541N.exe
- Size
  
  350KB
- MD5
  
  0e1092371876b363945a914731d9ab70
- SHA1
  
  3d9fc87f11fb3b44e469886e03c8b210e05e3ef4
- SHA256
  
  01a488fab72eb83b57323b7aeeb8a7989a20975bb7cc035f8d84dd14ac349541
- SHA512
  
  5c0dd2b734ae26f89300047cfe148d98e24ece0b00adfb8b17f20e05ff06ea275714acac670ead13ebd0afbfa1a5622bc69580c6fc984c6f7f52d102c2c1bbd8
- SSDEEP
  
  6144:loGhpuBMG29Gt6I/pPo486MAwA3l1AiE56:lppu6G29Gt62PoKRl1456
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy