ramnit | 1150ccbc04aa30bc938a6bf6b4a087f8f5d48265b7ffa659956e562aa4a46178 | Triage

Submit
Reports

Overview

overview

Static

static

3

1150ccbc04...78.exe

windows7-x64

1150ccbc04...78.exe

windows10-2004-x64

Sharing

General

Target

1150ccbc04aa30bc938a6bf6b4a087f8f5d48265b7ffa659956e562aa4a46178
Size

844KB
Sample

241220-zj9tyatlhv
MD5

dcabd0e4119ca80bac755dd16c527346
SHA1

db464e67586a4651a98b98f6ffff201a2abba289
SHA256

1150ccbc04aa30bc938a6bf6b4a087f8f5d48265b7ffa659956e562aa4a46178
SHA512

92ff1c6b77e9561600bc29a7c4d11a8e89329e29a90146ff44647dfff3c302a4bf471a7b35770016b736cf1a76d93c9d856f01a0ee74ec88fdbf941f9985a1f8
SSDEEP

12288:b/oOyoUj+UqlpCvaJ7ISSiBIM80cOp7BQGhEM7G/ny1UR:boOyorUqlAaJ7ISH80cOp7iBM7G/

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

1150ccbc04aa30bc938a6bf6b4a087f8f5d48265b7ffa659956e562aa4a46178.exe

Resource

win7-20240729-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

1150ccbc04aa30bc938a6bf6b4a087f8f5d48265b7ffa659956e562aa4a46178.exe

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  1150ccbc04aa30bc938a6bf6b4a087f8f5d48265b7ffa659956e562aa4a46178
- Size
  
  844KB
- MD5
  
  dcabd0e4119ca80bac755dd16c527346
- SHA1
  
  db464e67586a4651a98b98f6ffff201a2abba289
- SHA256
  
  1150ccbc04aa30bc938a6bf6b4a087f8f5d48265b7ffa659956e562aa4a46178
- SHA512
  
  92ff1c6b77e9561600bc29a7c4d11a8e89329e29a90146ff44647dfff3c302a4bf471a7b35770016b736cf1a76d93c9d856f01a0ee74ec88fdbf941f9985a1f8
- SSDEEP
  
  12288:b/oOyoUj+UqlpCvaJ7ISSiBIM80cOp7BQGhEM7G/ny1UR:boOyorUqlAaJ7ISH80cOp7iBM7G/
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy