ramnit | 8d820035b8e82fd369a13bdabcb5d89eae44e357749eda25d79093b88a2d360a | Triage

Submit
Reports

Overview

overview

Static

static

3

8d820035b8...aN.dll

windows7-x64

8d820035b8...aN.dll

windows10-2004-x64

Sharing

General

Target

8d820035b8e82fd369a13bdabcb5d89eae44e357749eda25d79093b88a2d360aN.exe
Size

4.6MB
Sample

241218-dsbgvaskdn
MD5

0b5aaa9eb2ceb917a096864aa7803420
SHA1

3da5f684788ebb55f4605d8342127d8bbdb6c3a9
SHA256

8d820035b8e82fd369a13bdabcb5d89eae44e357749eda25d79093b88a2d360a
SHA512

f45d36f4189a59a4cc7e621178a35a02f848d788fccba34a94db508e282a7c570034b501c16a5afcc7f1926328cc226b18bb3c9e734370503cbe696bd9d804f6
SSDEEP

49152:J9FV+oNBxTvOjP+leaI7ROSNM9LItKf+Pm9UMIJe7YHLk9z4OGLuFp7HGG0Gevyv:yqvOjPubI7R5G4m9UMIxQGsAdy

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

8d820035b8e82fd369a13bdabcb5d89eae44e357749eda25d79093b88a2d360aN.dll

Resource

win7-20241010-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

9 signatures

120 seconds

Behavioral task

behavioral2

Sample

8d820035b8e82fd369a13bdabcb5d89eae44e357749eda25d79093b88a2d360aN.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

10 signatures

120 seconds

Malware Config

Targets

- Target
  
  8d820035b8e82fd369a13bdabcb5d89eae44e357749eda25d79093b88a2d360aN.exe
- Size
  
  4.6MB
- MD5
  
  0b5aaa9eb2ceb917a096864aa7803420
- SHA1
  
  3da5f684788ebb55f4605d8342127d8bbdb6c3a9
- SHA256
  
  8d820035b8e82fd369a13bdabcb5d89eae44e357749eda25d79093b88a2d360a
- SHA512
  
  f45d36f4189a59a4cc7e621178a35a02f848d788fccba34a94db508e282a7c570034b501c16a5afcc7f1926328cc226b18bb3c9e734370503cbe696bd9d804f6
- SSDEEP
  
  49152:J9FV+oNBxTvOjP+leaI7ROSNM9LItKf+Pm9UMIJe7YHLk9z4OGLuFp7HGG0Gevyv:yqvOjPubI7R5G4m9UMIxQGsAdy
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy