Overview

overview

10

Static

static

3

2025-01-10...it.exe

windows7-x64

10

2025-01-10...it.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-10_06026052452148645ea8a81809a5be17_bkransomware_ramnit

  • Size

    1.9MB

  • Sample

    250110-c7ktdsyrbx

  • MD5

    06026052452148645ea8a81809a5be17

  • SHA1

    c3a17b07fabb55ed36a2cf54674fade7afb375b2

  • SHA256

    5bc1696a10586a56e8573f5fc4e3f60749da51a50ba08cf722017045a9a08e9d

  • SHA512

    bd8ddbb7f257611a2b8531992915f4864abb48eb4e0048776495ed91d32266270e0752941f44f7bdb13258cbbce75decd7c668c26abddd117e81ffc6bc0b2bb0

  • SSDEEP

    49152:FeYDquqezG3xoxpXAtrFahPkFiWqtoTS6tDz/HCQ+o:ALuLzG3xorYahPkFQcS6tDz/H3

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      2025-01-10_06026052452148645ea8a81809a5be17_bkransomware_ramnit

    • Size

      1.9MB

    • MD5

      06026052452148645ea8a81809a5be17

    • SHA1

      c3a17b07fabb55ed36a2cf54674fade7afb375b2

    • SHA256

      5bc1696a10586a56e8573f5fc4e3f60749da51a50ba08cf722017045a9a08e9d

    • SHA512

      bd8ddbb7f257611a2b8531992915f4864abb48eb4e0048776495ed91d32266270e0752941f44f7bdb13258cbbce75decd7c668c26abddd117e81ffc6bc0b2bb0

    • SSDEEP

      49152:FeYDquqezG3xoxpXAtrFahPkFiWqtoTS6tDz/HCQ+o:ALuLzG3xorYahPkFQcS6tDz/H3

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks