Overview

overview

10

Static

static

3

2025-01-14...it.exe

windows7-x64

10

2025-01-14...it.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-14_86ce99ced435589cd652db5e66919b88_bkransomware_ramnit

  • Size

    2.2MB

  • Sample

    250114-vbge7stjf1

  • MD5

    86ce99ced435589cd652db5e66919b88

  • SHA1

    fd74bc1bb0dc154bd4f09f31db90096329b464d3

  • SHA256

    ce728d96aa78387b2dcd45b20c213c3960147101f84ebb483a9c639cf991d940

  • SHA512

    7d5d6130d001bc5500d483d966049d514404c8389d7cd4c0fb7f12c550329f0f35e893403a5436f4d98255868e6c84b5fbcd1e4cb12c7412ab21000fbe2ed994

  • SSDEEP

    49152:JbheTlhinF4DNUScen4fuRQ24696jEs1rc/mUDYHfAlvwfGlM:QDiF4DNUben0uR46iE0rIYHfAlv

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      2025-01-14_86ce99ced435589cd652db5e66919b88_bkransomware_ramnit

    • Size

      2.2MB

    • MD5

      86ce99ced435589cd652db5e66919b88

    • SHA1

      fd74bc1bb0dc154bd4f09f31db90096329b464d3

    • SHA256

      ce728d96aa78387b2dcd45b20c213c3960147101f84ebb483a9c639cf991d940

    • SHA512

      7d5d6130d001bc5500d483d966049d514404c8389d7cd4c0fb7f12c550329f0f35e893403a5436f4d98255868e6c84b5fbcd1e4cb12c7412ab21000fbe2ed994

    • SSDEEP

      49152:JbheTlhinF4DNUScen4fuRQ24696jEs1rc/mUDYHfAlvwfGlM:QDiF4DNUben0uR46iE0rIYHfAlv

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks