ramnit | c17e08d3eccb9c757dc20cdd13924f07c92d68cc759f9221e99310195f56d789 | Triage

Submit
Reports

Overview

overview

Static

static

3

c17e08d3ec...9N.exe

windows7-x64

c17e08d3ec...9N.exe

windows10-2004-x64

Sharing

General

Target

c17e08d3eccb9c757dc20cdd13924f07c92d68cc759f9221e99310195f56d789N.exe
Size

1.7MB
Sample

250103-n5y4saslex
MD5

390b6ef66d9b9c9d09041a65ef0e7150
SHA1

3bb985ce86f1fab36fcda20bc0d4fa0b04377915
SHA256

c17e08d3eccb9c757dc20cdd13924f07c92d68cc759f9221e99310195f56d789
SHA512

9ba5e9570b194408189d3e4a122717d06436eca7c07ca5e2d236a2deeaa7cd52234b2507c80978f6c2e928f0ac76721d9c7c610bbccd421d159407204eb381ff
SSDEEP

12288:IqOPajQUXXP8QvLWFx6Mo5rippDC7ee1hpls4Ey+fnKQQw70pEfThvrhvLWr:InajQEPnvg6PhWDC750fKoXfThvrFM

Score

10^/10

ramnit banker discovery evasion spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

c17e08d3eccb9c757dc20cdd13924f07c92d68cc759f9221e99310195f56d789N.exe

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

13 signatures

120 seconds

Behavioral task

behavioral2

Sample

c17e08d3eccb9c757dc20cdd13924f07c92d68cc759f9221e99310195f56d789N.exe

Resource

win10v2004-20241007-en

ramnit banker discovery evasion spyware stealer trojan upx worm

windows10-2004-x64

15 signatures

120 seconds

Malware Config

Targets

- Target
  
  c17e08d3eccb9c757dc20cdd13924f07c92d68cc759f9221e99310195f56d789N.exe
- Size
  
  1.7MB
- MD5
  
  390b6ef66d9b9c9d09041a65ef0e7150
- SHA1
  
  3bb985ce86f1fab36fcda20bc0d4fa0b04377915
- SHA256
  
  c17e08d3eccb9c757dc20cdd13924f07c92d68cc759f9221e99310195f56d789
- SHA512
  
  9ba5e9570b194408189d3e4a122717d06436eca7c07ca5e2d236a2deeaa7cd52234b2507c80978f6c2e928f0ac76721d9c7c610bbccd421d159407204eb381ff
- SSDEEP
  
  12288:IqOPajQUXXP8QvLWFx6Mo5rippDC7ee1hpls4Ey+fnKQQw70pEfThvrhvLWr:InajQEPnvg6PhWDC750fKoXfThvrFM
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm evasion
- Modifies firewall policy service
  evasion
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryevasionspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy