ramnit | c9349e3cde70a1566d8df4c42e6a6b01a1189f6b4f25c7d7ffd692759a9cad76 | Triage

Submit
Reports

Overview

overview

Static

static

3

c9349e3cde...76.dll

windows7-x64

c9349e3cde...76.dll

windows10-2004-x64

7

Sharing

General

Target

c9349e3cde70a1566d8df4c42e6a6b01a1189f6b4f25c7d7ffd692759a9cad76.exe
Size

136KB
Sample

241217-n8dbgszlan
MD5

a08fb5ca6d167095035a559c5f80a73c
SHA1

1e85d9e06b2e5e09fd41ef3448fd873b1005d592
SHA256

c9349e3cde70a1566d8df4c42e6a6b01a1189f6b4f25c7d7ffd692759a9cad76
SHA512

07d2e7e250224ab0effdbcc9a39379c126e9cd050cbb1013dda6f924fd87a26e5f20c6442e01b19a712bc601889c81c7541e1b4df1e2e5df8739d0f9cf7f5324
SSDEEP

1536:1gmf5TfxYPfpoT/7ivK6Fr/E0odbbb2inHetkc5cqvnMg/WpRh70qQ4SDMTTtFVz:1rEnpofGTuXHHetkqcqvnhzduB

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

c9349e3cde70a1566d8df4c42e6a6b01a1189f6b4f25c7d7ffd692759a9cad76.dll

Resource

win7-20240708-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

13 signatures

120 seconds

Behavioral task

behavioral2

Sample

c9349e3cde70a1566d8df4c42e6a6b01a1189f6b4f25c7d7ffd692759a9cad76.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

6 signatures

120 seconds

Malware Config

Targets

- Target
  
  c9349e3cde70a1566d8df4c42e6a6b01a1189f6b4f25c7d7ffd692759a9cad76.exe
- Size
  
  136KB
- MD5
  
  a08fb5ca6d167095035a559c5f80a73c
- SHA1
  
  1e85d9e06b2e5e09fd41ef3448fd873b1005d592
- SHA256
  
  c9349e3cde70a1566d8df4c42e6a6b01a1189f6b4f25c7d7ffd692759a9cad76
- SHA512
  
  07d2e7e250224ab0effdbcc9a39379c126e9cd050cbb1013dda6f924fd87a26e5f20c6442e01b19a712bc601889c81c7541e1b4df1e2e5df8739d0f9cf7f5324
- SSDEEP
  
  1536:1gmf5TfxYPfpoT/7ivK6Fr/E0odbbb2inHetkc5cqvnMg/WpRh70qQ4SDMTTtFVz:1rEnpofGTuXHHetkqcqvnhzduB
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy