ramnit | 4ec82f46f83c82b72ef98780baf08fccf8a6e246ba19061549a7db80ccbb3085 | Triage

Submit
Reports

Overview

overview

Static

static

3

4ec82f46f8...85.dll

windows7-x64

7

4ec82f46f8...85.dll

windows10-2004-x64

Sharing

General

Target

4ec82f46f83c82b72ef98780baf08fccf8a6e246ba19061549a7db80ccbb3085.exe
Size

2.4MB
Sample

241230-ynbx2awlfr
MD5

b87a2a672bc4c8a5f60df8ded889071f
SHA1

6cf6935d7b79b4827272e0284f562fb8a14403ca
SHA256

4ec82f46f83c82b72ef98780baf08fccf8a6e246ba19061549a7db80ccbb3085
SHA512

66a1e3af16ca8aa9d33cf026d5fbce4f96bbcdca2f52ea8a9ea7b3c65848f1019cb249b2f3a423b32546cf3ae4e3977af18b21ff6d050e55a623d55430dd4cc7
SSDEEP

49152:xU3U+ZYmxjpv7x4GFM/+b8dTMNh9Wr73h7NXSWEqNJO5hYTVMCRisKEbzE:xiU2YmxjpDx4Zo8dYNh9q73h7NXYkRiH

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

4ec82f46f83c82b72ef98780baf08fccf8a6e246ba19061549a7db80ccbb3085.dll

Resource

win7-20241010-en

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

4ec82f46f83c82b72ef98780baf08fccf8a6e246ba19061549a7db80ccbb3085.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

15 signatures

120 seconds

Malware Config

Targets

- Target
  
  4ec82f46f83c82b72ef98780baf08fccf8a6e246ba19061549a7db80ccbb3085.exe
- Size
  
  2.4MB
- MD5
  
  b87a2a672bc4c8a5f60df8ded889071f
- SHA1
  
  6cf6935d7b79b4827272e0284f562fb8a14403ca
- SHA256
  
  4ec82f46f83c82b72ef98780baf08fccf8a6e246ba19061549a7db80ccbb3085
- SHA512
  
  66a1e3af16ca8aa9d33cf026d5fbce4f96bbcdca2f52ea8a9ea7b3c65848f1019cb249b2f3a423b32546cf3ae4e3977af18b21ff6d050e55a623d55430dd4cc7
- SSDEEP
  
  49152:xU3U+ZYmxjpv7x4GFM/+b8dTMNh9Wr73h7NXSWEqNJO5hYTVMCRisKEbzE:xiU2YmxjpDx4Zo8dYNh9q73h7NXYkRiH
Score

10^/10

discovery ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy