ramnit | e2af923eb604287686987c977bd5b7d85354377ca74c5a002206b647e0738143 | Triage

Submit
Reports

Overview

overview

Static

static

3

e2af923eb6...43.dll

windows7-x64

7

e2af923eb6...43.dll

windows10-2004-x64

Sharing

General

Target

e2af923eb604287686987c977bd5b7d85354377ca74c5a002206b647e0738143.exe
Size

188KB
Sample

241218-htfv6sykav
MD5

2828a5c5917e4e8b36da55dc303ab752
SHA1

983ae161d008475fc2d1510bd2ce75e5ad6e9ed5
SHA256

e2af923eb604287686987c977bd5b7d85354377ca74c5a002206b647e0738143
SHA512

cbde1292d66936ad79b89893343417828e45943c22eb04a595dc7c467ca563cb3e4f2f1084cff23b79c9b23c2dd548bab9ab3b8856acc59024e1aacee83c1bc0
SSDEEP

3072:wkk/wxp+etRwew56OxxejSGuBoBp2QzrZHBMtYsIrfy9Qm:zDHA6dj1BrZHutWrfE

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

e2af923eb604287686987c977bd5b7d85354377ca74c5a002206b647e0738143.dll

Resource

win7-20240903-en

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

e2af923eb604287686987c977bd5b7d85354377ca74c5a002206b647e0738143.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

15 signatures

120 seconds

Malware Config

Targets

- Target
  
  e2af923eb604287686987c977bd5b7d85354377ca74c5a002206b647e0738143.exe
- Size
  
  188KB
- MD5
  
  2828a5c5917e4e8b36da55dc303ab752
- SHA1
  
  983ae161d008475fc2d1510bd2ce75e5ad6e9ed5
- SHA256
  
  e2af923eb604287686987c977bd5b7d85354377ca74c5a002206b647e0738143
- SHA512
  
  cbde1292d66936ad79b89893343417828e45943c22eb04a595dc7c467ca563cb3e4f2f1084cff23b79c9b23c2dd548bab9ab3b8856acc59024e1aacee83c1bc0
- SSDEEP
  
  3072:wkk/wxp+etRwew56OxxejSGuBoBp2QzrZHBMtYsIrfy9Qm:zDHA6dj1BrZHutWrfE
Score

10^/10

discovery ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2024

Terms | Privacy