ramnit | 3da2c1e161da9d036bd4987f77b617434fad50a5e1f69fbd89da839468115cd7 | Triage

Submit
Reports

Overview

overview

Static

static

3

3da2c1e161...7N.dll

windows7-x64

3da2c1e161...7N.dll

windows10-2004-x64

Sharing

General

Target

3da2c1e161da9d036bd4987f77b617434fad50a5e1f69fbd89da839468115cd7N.exe
Size

547KB
Sample

250108-x9c7jsspdp
MD5

a6c529a38efca7cbadddb13f1bfbeca0
SHA1

cba60d1521f3863b2a85948b8050f3303b51a886
SHA256

3da2c1e161da9d036bd4987f77b617434fad50a5e1f69fbd89da839468115cd7
SHA512

483c71a3d769b9e610502ff9a58809c2ae7a12d73d036d4296a1d5f724391d51c7bd0a9ba67c466546244c101e3931aa8359f198bf207c5042d2c997ac6ceb72
SSDEEP

6144:OI/nB/9B0JQjRIntsEt45OvoU4Djn+sSAdfTmFdSm4FI/nNYV03S8ytG5dHL+SNh:O6vWJEut/oUaLd7lFI/nHDXZ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

3da2c1e161da9d036bd4987f77b617434fad50a5e1f69fbd89da839468115cd7N.dll

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

13 signatures

120 seconds

Behavioral task

behavioral2

Sample

3da2c1e161da9d036bd4987f77b617434fad50a5e1f69fbd89da839468115cd7N.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

12 signatures

120 seconds

Malware Config

Targets

- Target
  
  3da2c1e161da9d036bd4987f77b617434fad50a5e1f69fbd89da839468115cd7N.exe
- Size
  
  547KB
- MD5
  
  a6c529a38efca7cbadddb13f1bfbeca0
- SHA1
  
  cba60d1521f3863b2a85948b8050f3303b51a886
- SHA256
  
  3da2c1e161da9d036bd4987f77b617434fad50a5e1f69fbd89da839468115cd7
- SHA512
  
  483c71a3d769b9e610502ff9a58809c2ae7a12d73d036d4296a1d5f724391d51c7bd0a9ba67c466546244c101e3931aa8359f198bf207c5042d2c997ac6ceb72
- SSDEEP
  
  6144:OI/nB/9B0JQjRIntsEt45OvoU4Djn+sSAdfTmFdSm4FI/nNYV03S8ytG5dHL+SNh:O6vWJEut/oUaLd7lFI/nHDXZ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy