ramnit | 70633dcce6c44267c5073c800013b96fec4b3cd6f4dce2c86e41b2c70e4761f3 | Triage

Submit
Reports

Overview

overview

Static

static

3

70633dcce6...3N.dll

windows7-x64

70633dcce6...3N.dll

windows10-2004-x64

Sharing

General

Target

70633dcce6c44267c5073c800013b96fec4b3cd6f4dce2c86e41b2c70e4761f3N.exe
Size

1.5MB
Sample

250108-ql62dstnam
MD5

f509e7803c1deb94adf7fb9a42764350
SHA1

6367ab6d80c70eeb233f90bf79cb29f2f339e14f
SHA256

70633dcce6c44267c5073c800013b96fec4b3cd6f4dce2c86e41b2c70e4761f3
SHA512

2d54141bd052acb48a1437a8d239d0c89e33157468f8d0a015567b93f57477f586811b65bf111cff5a98a99957fabccf95b121d6497e6a770a21da603f97363e
SSDEEP

24576:j3DYvW2MI3POgNLadFbj2QSmzlgRQY8x:6F//SMmWRQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

70633dcce6c44267c5073c800013b96fec4b3cd6f4dce2c86e41b2c70e4761f3N.dll

Resource

win7-20241010-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

14 signatures

120 seconds

Behavioral task

behavioral2

Sample

70633dcce6c44267c5073c800013b96fec4b3cd6f4dce2c86e41b2c70e4761f3N.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

13 signatures

120 seconds

Malware Config

Targets

- Target
  
  70633dcce6c44267c5073c800013b96fec4b3cd6f4dce2c86e41b2c70e4761f3N.exe
- Size
  
  1.5MB
- MD5
  
  f509e7803c1deb94adf7fb9a42764350
- SHA1
  
  6367ab6d80c70eeb233f90bf79cb29f2f339e14f
- SHA256
  
  70633dcce6c44267c5073c800013b96fec4b3cd6f4dce2c86e41b2c70e4761f3
- SHA512
  
  2d54141bd052acb48a1437a8d239d0c89e33157468f8d0a015567b93f57477f586811b65bf111cff5a98a99957fabccf95b121d6497e6a770a21da603f97363e
- SSDEEP
  
  24576:j3DYvW2MI3POgNLadFbj2QSmzlgRQY8x:6F//SMmWRQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy