ramnit | 5514c97bbf2845cb244e6603d16cef52f1c0335f968d4f44097ff88dda70194c | Triage

Submit
Reports

Overview

overview

Static

static

3

5514c97bbf...4c.dll

windows7-x64

5514c97bbf...4c.dll

windows10-2004-x64

Sharing

General

Target

5514c97bbf2845cb244e6603d16cef52f1c0335f968d4f44097ff88dda70194c.exe
Size

124KB
Sample

241226-ptefnswkfn
MD5

352731e9b9344d98404c27581ff7a396
SHA1

b88ce461d86f7fb0e530e166b33de8888a7d91ca
SHA256

5514c97bbf2845cb244e6603d16cef52f1c0335f968d4f44097ff88dda70194c
SHA512

55554a4f622bec3f4b759323e51e5c116ccd38bf38151d6b9abc3dd34f1cafc486b0c6779ffd4b2bdaf3de59d5f80e35a29b96248c8a4977dff209026825d9c1
SSDEEP

3072:ijulMZM5M7VmKeZ88Dkj7oR2SqwKJXtf5DGyVBQwIY6X47:i9BcvZNDkYR2SqwK/AyVBQ9RI7

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

5514c97bbf2845cb244e6603d16cef52f1c0335f968d4f44097ff88dda70194c.dll

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

14 signatures

120 seconds

Behavioral task

behavioral2

Sample

5514c97bbf2845cb244e6603d16cef52f1c0335f968d4f44097ff88dda70194c.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

13 signatures

120 seconds

Malware Config

Targets

- Target
  
  5514c97bbf2845cb244e6603d16cef52f1c0335f968d4f44097ff88dda70194c.exe
- Size
  
  124KB
- MD5
  
  352731e9b9344d98404c27581ff7a396
- SHA1
  
  b88ce461d86f7fb0e530e166b33de8888a7d91ca
- SHA256
  
  5514c97bbf2845cb244e6603d16cef52f1c0335f968d4f44097ff88dda70194c
- SHA512
  
  55554a4f622bec3f4b759323e51e5c116ccd38bf38151d6b9abc3dd34f1cafc486b0c6779ffd4b2bdaf3de59d5f80e35a29b96248c8a4977dff209026825d9c1
- SSDEEP
  
  3072:ijulMZM5M7VmKeZ88Dkj7oR2SqwKJXtf5DGyVBQwIY6X47:i9BcvZNDkYR2SqwK/AyVBQ9RI7
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy