Overview

overview

10

Static

static

3

2025-01-03...it.exe

windows7-x64

10

2025-01-03...it.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-03_4a65bc7f8169b7856bcf301224a778d3_mafia_ramnit

  • Size

    1.9MB

  • Sample

    250103-pmne1atmaw

  • MD5

    4a65bc7f8169b7856bcf301224a778d3

  • SHA1

    91ae75d9cfa2d93df53a39222bd4b482d719e1db

  • SHA256

    21cb862b0e7b729a973f6a2a7171c0dbff0065f625ff58bee734abc55c11f857

  • SHA512

    8d9ec6697566b546f1fd905bfbac9aabe33b45cdc757e2d806c8dbea1ca76f66b6f248b8b8e6ad06e63cdf0ac139a96100cd3e9a44795a40661c6186bdea53dd

  • SSDEEP

    49152:GfH9d7Hq+fTD6aHf3IFLeVsxKaEwudNNNkeeBqocYdAt1HKgD9vBZ:GfdRHq+7OaHf4LxxKaEwudNNNkeekt1d

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      2025-01-03_4a65bc7f8169b7856bcf301224a778d3_mafia_ramnit

    • Size

      1.9MB

    • MD5

      4a65bc7f8169b7856bcf301224a778d3

    • SHA1

      91ae75d9cfa2d93df53a39222bd4b482d719e1db

    • SHA256

      21cb862b0e7b729a973f6a2a7171c0dbff0065f625ff58bee734abc55c11f857

    • SHA512

      8d9ec6697566b546f1fd905bfbac9aabe33b45cdc757e2d806c8dbea1ca76f66b6f248b8b8e6ad06e63cdf0ac139a96100cd3e9a44795a40661c6186bdea53dd

    • SSDEEP

      49152:GfH9d7Hq+fTD6aHf3IFLeVsxKaEwudNNNkeeBqocYdAt1HKgD9vBZ:GfdRHq+7OaHf4LxxKaEwudNNNkeekt1d

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks