ramnit | fe81a558034dcf5f4dfb709ec5b2fc0e5e43abe84555e85884b7271547bd58f4 | Triage

Submit
Reports

Overview

overview

Static

static

3

fe81a55803...f4.dll

windows7-x64

fe81a55803...f4.dll

windows10-2004-x64

Sharing

General

Target

fe81a558034dcf5f4dfb709ec5b2fc0e5e43abe84555e85884b7271547bd58f4.exe
Size

148KB
Sample

241226-zkt5wayrg1
MD5

e7f7955583c677ea596b6e9a7c68cf9e
SHA1

ff46415c6367374454fb2abe612891208377962c
SHA256

fe81a558034dcf5f4dfb709ec5b2fc0e5e43abe84555e85884b7271547bd58f4
SHA512

df7afda1e4b570cf92538da5ccd73f285887294db89d28d082a5ea3c4d8a4bb536751e1b7f23c0a978539939109c1ce7f7f760ff28f0f054048e19fbe1a36648
SSDEEP

3072:+Bbqirt+ZEM7VmKeZ88Dkj7oR2SqwKJXtf5DGyVBQwIY6X46:F5cvZNDkYR2SqwK/AyVBQ9RI6

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

fe81a558034dcf5f4dfb709ec5b2fc0e5e43abe84555e85884b7271547bd58f4.dll

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

14 signatures

120 seconds

Behavioral task

behavioral2

Sample

fe81a558034dcf5f4dfb709ec5b2fc0e5e43abe84555e85884b7271547bd58f4.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

13 signatures

120 seconds

Malware Config

Targets

- Target
  
  fe81a558034dcf5f4dfb709ec5b2fc0e5e43abe84555e85884b7271547bd58f4.exe
- Size
  
  148KB
- MD5
  
  e7f7955583c677ea596b6e9a7c68cf9e
- SHA1
  
  ff46415c6367374454fb2abe612891208377962c
- SHA256
  
  fe81a558034dcf5f4dfb709ec5b2fc0e5e43abe84555e85884b7271547bd58f4
- SHA512
  
  df7afda1e4b570cf92538da5ccd73f285887294db89d28d082a5ea3c4d8a4bb536751e1b7f23c0a978539939109c1ce7f7f760ff28f0f054048e19fbe1a36648
- SSDEEP
  
  3072:+Bbqirt+ZEM7VmKeZ88Dkj7oR2SqwKJXtf5DGyVBQwIY6X46:F5cvZNDkYR2SqwK/AyVBQ9RI6
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy