ramnit | 13621f1f97a184ba0c8c05ce4e3fe710c1d13f8d5adea995ed9e69fca7bcdc94 | Triage

Submit
Reports

Overview

overview

Static

static

3

13621f1f97...94.exe

windows7-x64

13621f1f97...94.exe

windows10-2004-x64

Sharing

General

Target

13621f1f97a184ba0c8c05ce4e3fe710c1d13f8d5adea995ed9e69fca7bcdc94
Size

179KB
Sample

250102-yl9raatmcw
MD5

1395d3e2bca17fb66c2a264112a55f07
SHA1

c76a130a3295520008efc9b91c492da4b72ebdd9
SHA256

13621f1f97a184ba0c8c05ce4e3fe710c1d13f8d5adea995ed9e69fca7bcdc94
SHA512

c95989f849d52e82ba2c7a1b7a2cda76c6bba945c28a63727c89a21ad2a3b06c8727173c99646b74ee980a890e2a8b2e91bae0a844f5c6e1efd650e89aa2820d
SSDEEP

3072:tkAwOzhjdRmSZiAqFbrnp+KsYGngL8DSfqZAzYU9g5YDz+e1tPY:Nw8h/7PCkKsYGgLySiOKyDC2dY

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

13621f1f97a184ba0c8c05ce4e3fe710c1d13f8d5adea995ed9e69fca7bcdc94.exe

Resource

win7-20241010-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

13621f1f97a184ba0c8c05ce4e3fe710c1d13f8d5adea995ed9e69fca7bcdc94.exe

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  13621f1f97a184ba0c8c05ce4e3fe710c1d13f8d5adea995ed9e69fca7bcdc94
- Size
  
  179KB
- MD5
  
  1395d3e2bca17fb66c2a264112a55f07
- SHA1
  
  c76a130a3295520008efc9b91c492da4b72ebdd9
- SHA256
  
  13621f1f97a184ba0c8c05ce4e3fe710c1d13f8d5adea995ed9e69fca7bcdc94
- SHA512
  
  c95989f849d52e82ba2c7a1b7a2cda76c6bba945c28a63727c89a21ad2a3b06c8727173c99646b74ee980a890e2a8b2e91bae0a844f5c6e1efd650e89aa2820d
- SSDEEP
  
  3072:tkAwOzhjdRmSZiAqFbrnp+KsYGngL8DSfqZAzYU9g5YDz+e1tPY:Nw8h/7PCkKsYGgLySiOKyDC2dY
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy