ramnit | 31f57fd3bcfe08a44759c0ece315d8b9db9dc5acd9af3d97ebc56e3bbce712fc | Triage

Submit
Reports

Overview

overview

Static

static

3

31f57fd3bc...cN.dll

windows7-x64

31f57fd3bc...cN.dll

windows10-2004-x64

Sharing

General

Target

31f57fd3bcfe08a44759c0ece315d8b9db9dc5acd9af3d97ebc56e3bbce712fcN.exe
Size

369KB
Sample

250104-tzxlnaxlez
MD5

a6608a279ec812a480893cb43f6e2fa0
SHA1

3d976e665c2e7f6d705fa6bee1d9b033e0a138c2
SHA256

31f57fd3bcfe08a44759c0ece315d8b9db9dc5acd9af3d97ebc56e3bbce712fc
SHA512

738b993ab4d50aa21e4aa87d5c66c1d3517e9d74d13096f518518e2bba91b36bbb635cea5553618bd5b44bfd1d82c210656542d830e23fab5e28afc5b10eecd6
SSDEEP

6144:3Op8HpzdQOStK9MbNmkeQfSec5W7iDLcGAiSY9mUjq7Mm:3Op8Hpz7yMJv/o7isi1jI

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

31f57fd3bcfe08a44759c0ece315d8b9db9dc5acd9af3d97ebc56e3bbce712fcN.dll

Resource

win7-20241010-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

14 signatures

120 seconds

Behavioral task

behavioral2

Sample

31f57fd3bcfe08a44759c0ece315d8b9db9dc5acd9af3d97ebc56e3bbce712fcN.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

13 signatures

120 seconds

Malware Config

Targets

- Target
  
  31f57fd3bcfe08a44759c0ece315d8b9db9dc5acd9af3d97ebc56e3bbce712fcN.exe
- Size
  
  369KB
- MD5
  
  a6608a279ec812a480893cb43f6e2fa0
- SHA1
  
  3d976e665c2e7f6d705fa6bee1d9b033e0a138c2
- SHA256
  
  31f57fd3bcfe08a44759c0ece315d8b9db9dc5acd9af3d97ebc56e3bbce712fc
- SHA512
  
  738b993ab4d50aa21e4aa87d5c66c1d3517e9d74d13096f518518e2bba91b36bbb635cea5553618bd5b44bfd1d82c210656542d830e23fab5e28afc5b10eecd6
- SSDEEP
  
  6144:3Op8HpzdQOStK9MbNmkeQfSec5W7iDLcGAiSY9mUjq7Mm:3Op8Hpz7yMJv/o7isi1jI
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy