ramnit | 3c14b637c3cd239b261ae329c1f9dd66e9bbd7a856e850ede1e0f64c37308538 | Triage

Submit
Reports

Overview

overview

Static

static

3

3c14b637c3...8N.dll

windows7-x64

3c14b637c3...8N.dll

windows10-2004-x64

Sharing

General

Target

3c14b637c3cd239b261ae329c1f9dd66e9bbd7a856e850ede1e0f64c37308538N.exe
Size

972KB
Sample

250102-jjy5fatpck
MD5

bcd5ddde092f859e579aeb43fe8efb90
SHA1

3d8742e3a9896a0b80683cf4f908434c20ee02ae
SHA256

3c14b637c3cd239b261ae329c1f9dd66e9bbd7a856e850ede1e0f64c37308538
SHA512

3aea09e88bc20683c13d022a7ffc0743c78683e67d6354a1fb0c229a1dc852bbdee40b9ba3562ecf7722d3b5e5ead57ce7fff4d63cda1e49e0efb7c4f794b6d9
SSDEEP

12288:u4Rc5VE31XqaJusxGhr46CYtQ9mGycvPs9Ct:umc5iFBRxC+9mGycXs9Ct

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

3c14b637c3cd239b261ae329c1f9dd66e9bbd7a856e850ede1e0f64c37308538N.dll

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

9 signatures

120 seconds

Behavioral task

behavioral2

Sample

3c14b637c3cd239b261ae329c1f9dd66e9bbd7a856e850ede1e0f64c37308538N.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

9 signatures

120 seconds

Malware Config

Targets

- Target
  
  3c14b637c3cd239b261ae329c1f9dd66e9bbd7a856e850ede1e0f64c37308538N.exe
- Size
  
  972KB
- MD5
  
  bcd5ddde092f859e579aeb43fe8efb90
- SHA1
  
  3d8742e3a9896a0b80683cf4f908434c20ee02ae
- SHA256
  
  3c14b637c3cd239b261ae329c1f9dd66e9bbd7a856e850ede1e0f64c37308538
- SHA512
  
  3aea09e88bc20683c13d022a7ffc0743c78683e67d6354a1fb0c229a1dc852bbdee40b9ba3562ecf7722d3b5e5ead57ce7fff4d63cda1e49e0efb7c4f794b6d9
- SSDEEP
  
  12288:u4Rc5VE31XqaJusxGhr46CYtQ9mGycvPs9Ct:umc5iFBRxC+9mGycXs9Ct
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy