ramnit | 9eaeefd3d75302a4ec997c9adc9bdef6dd3aedd379d779a05bdc9aa943a6bd56 | Triage

Submit
Reports

Overview

overview

Static

static

3

9eaeefd3d7...6N.exe

windows7-x64

9eaeefd3d7...6N.exe

windows10-2004-x64

3

Sharing

General

Target

9eaeefd3d75302a4ec997c9adc9bdef6dd3aedd379d779a05bdc9aa943a6bd56N.exe
Size

282KB
Sample

250102-clfmjszmem
MD5

4a51ce950183657dc66c428aab223280
SHA1

1c3bd0cef887a56762afefd140be48019c2624d3
SHA256

9eaeefd3d75302a4ec997c9adc9bdef6dd3aedd379d779a05bdc9aa943a6bd56
SHA512

402acb2073329999f0852b1b9239dfd5769033aee79c250df06353d5d4555529e2a8eeabd1520565144e65216bada7ed1b26b9c3b84383c5f405a096c8c6f58a
SSDEEP

6144:OLukrrarV55qNTMA4LBf0dJ5TTBZbspom7bXS:hkr055qNTQN0VTTbM/C

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

9eaeefd3d75302a4ec997c9adc9bdef6dd3aedd379d779a05bdc9aa943a6bd56N.exe

Resource

win7-20240708-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

10 signatures

120 seconds

Behavioral task

behavioral2

Sample

9eaeefd3d75302a4ec997c9adc9bdef6dd3aedd379d779a05bdc9aa943a6bd56N.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

120 seconds

Malware Config

Targets

- Target
  
  9eaeefd3d75302a4ec997c9adc9bdef6dd3aedd379d779a05bdc9aa943a6bd56N.exe
- Size
  
  282KB
- MD5
  
  4a51ce950183657dc66c428aab223280
- SHA1
  
  1c3bd0cef887a56762afefd140be48019c2624d3
- SHA256
  
  9eaeefd3d75302a4ec997c9adc9bdef6dd3aedd379d779a05bdc9aa943a6bd56
- SHA512
  
  402acb2073329999f0852b1b9239dfd5769033aee79c250df06353d5d4555529e2a8eeabd1520565144e65216bada7ed1b26b9c3b84383c5f405a096c8c6f58a
- SSDEEP
  
  6144:OLukrrarV55qNTMA4LBf0dJ5TTBZbspom7bXS:hkr055qNTQN0VTTbM/C
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2025

Terms | Privacy