Overview

overview

10

Static

static

3

2025-01-14...it.exe

windows7-x64

10

2025-01-14...it.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-14_f0f3b0cd2f79f5793e9af47cc4ef6a44_bkransomware_ramnit

  • Size

    2.2MB

  • Sample

    250114-t85cvsvpgr

  • MD5

    f0f3b0cd2f79f5793e9af47cc4ef6a44

  • SHA1

    7cc4e8161e05205e6c92e84c95813bc2310f38cc

  • SHA256

    906738fbeeb9b033d43752b8d27117db06c878d0dcad36075bbb9b48c04ad5ff

  • SHA512

    27bbb6dc44f941133e1d7f71856f8e9ec162c68a99668cca98d85b9703bc1c8227aee519d6c2ea8e458345e3252b7467c8fa51917929903989a5e0627fb1da15

  • SSDEEP

    49152:nbheJOlYsHxaVwS2/jCcV9XuKw7iK1dtKmPBNsto2z/cXfGl0:wu5HxaV72rCyXuKDK1dMuNsto2z/c

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      2025-01-14_f0f3b0cd2f79f5793e9af47cc4ef6a44_bkransomware_ramnit

    • Size

      2.2MB

    • MD5

      f0f3b0cd2f79f5793e9af47cc4ef6a44

    • SHA1

      7cc4e8161e05205e6c92e84c95813bc2310f38cc

    • SHA256

      906738fbeeb9b033d43752b8d27117db06c878d0dcad36075bbb9b48c04ad5ff

    • SHA512

      27bbb6dc44f941133e1d7f71856f8e9ec162c68a99668cca98d85b9703bc1c8227aee519d6c2ea8e458345e3252b7467c8fa51917929903989a5e0627fb1da15

    • SSDEEP

      49152:nbheJOlYsHxaVwS2/jCcV9XuKw7iK1dtKmPBNsto2z/cXfGl0:wu5HxaV72rCyXuKDK1dMuNsto2z/c

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks