ramnit | b16be14cdf397c4f9d98ab5a126225d1686d20adcd5409a265361f527aa48c32 | Triage

Submit
Reports

Overview

overview

Static

static

3

b16be14cdf...2N.dll

windows7-x64

b16be14cdf...2N.dll

windows10-2004-x64

Sharing

General

Target

b16be14cdf397c4f9d98ab5a126225d1686d20adcd5409a265361f527aa48c32N.exe
Size

148KB
Sample

241220-ayxeqavpbj
MD5

33acc6c988371dc35017fa42ff6721c0
SHA1

3bc838bf12fb4640f0e62d65a7d5981705e5e612
SHA256

b16be14cdf397c4f9d98ab5a126225d1686d20adcd5409a265361f527aa48c32
SHA512

7ec5287ad03a0e7690d76624de5a097044e9baaecde558b57470caa9fe586036bbdd1b2fde5c98bc30411623857ab6e9d6d43222f1eb769861d371a2bfc57154
SSDEEP

3072:vbvbdXNNt9qmrxB6Sb86LY6hNVWC5cyzsaKPQG16Vzq2FPQKtY1ADmpPYK5MxGgU:Tvs0jp1oCRwm1SKnm8V

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

b16be14cdf397c4f9d98ab5a126225d1686d20adcd5409a265361f527aa48c32N.dll

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

14 signatures

120 seconds

Behavioral task

behavioral2

Sample

b16be14cdf397c4f9d98ab5a126225d1686d20adcd5409a265361f527aa48c32N.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

13 signatures

120 seconds

Malware Config

Targets

- Target
  
  b16be14cdf397c4f9d98ab5a126225d1686d20adcd5409a265361f527aa48c32N.exe
- Size
  
  148KB
- MD5
  
  33acc6c988371dc35017fa42ff6721c0
- SHA1
  
  3bc838bf12fb4640f0e62d65a7d5981705e5e612
- SHA256
  
  b16be14cdf397c4f9d98ab5a126225d1686d20adcd5409a265361f527aa48c32
- SHA512
  
  7ec5287ad03a0e7690d76624de5a097044e9baaecde558b57470caa9fe586036bbdd1b2fde5c98bc30411623857ab6e9d6d43222f1eb769861d371a2bfc57154
- SSDEEP
  
  3072:vbvbdXNNt9qmrxB6Sb86LY6hNVWC5cyzsaKPQG16Vzq2FPQKtY1ADmpPYK5MxGgU:Tvs0jp1oCRwm1SKnm8V
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2024

Terms | Privacy