ramnit | 60b242a2b081b1ad8a8daa95e92e0d4a7944c10a183353d06f80ff997e0086be | Triage

Submit
Reports

Overview

overview

Static

static

3

60b242a2b0...eN.dll

windows7-x64

60b242a2b0...eN.dll

windows10-2004-x64

Sharing

General

Target

60b242a2b081b1ad8a8daa95e92e0d4a7944c10a183353d06f80ff997e0086beN.exe
Size

256KB
Sample

250120-c6x3bsxmas
MD5

a40e15d0c2eed333389f33c15ddfbcc0
SHA1

3dfeba2877f447ec783f1d56dafcd514e7a7b919
SHA256

60b242a2b081b1ad8a8daa95e92e0d4a7944c10a183353d06f80ff997e0086be
SHA512

1ecbc2e2d89343e8e1286bd9b2ea0cf836a3cecaf2018cce66b50a5bb912ec1439d9aa871b697ea1e660f6cb4404d1329c4583a5cb1c0e85a9dbb1fed7bbf1b3
SSDEEP

3072:zn4cV8gf2u41Z5tKlFxwHdIWKc8DAGhn8D5sAxvEbzNmBTq/lSKVtB/LFYYSNGGv:74y8gOl2COc8rWD5n+9sTq9TVbRYK6B

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

60b242a2b081b1ad8a8daa95e92e0d4a7944c10a183353d06f80ff997e0086beN.dll

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

14 signatures

120 seconds

Behavioral task

behavioral2

Sample

60b242a2b081b1ad8a8daa95e92e0d4a7944c10a183353d06f80ff997e0086beN.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

14 signatures

120 seconds

Malware Config

Targets

- Target
  
  60b242a2b081b1ad8a8daa95e92e0d4a7944c10a183353d06f80ff997e0086beN.exe
- Size
  
  256KB
- MD5
  
  a40e15d0c2eed333389f33c15ddfbcc0
- SHA1
  
  3dfeba2877f447ec783f1d56dafcd514e7a7b919
- SHA256
  
  60b242a2b081b1ad8a8daa95e92e0d4a7944c10a183353d06f80ff997e0086be
- SHA512
  
  1ecbc2e2d89343e8e1286bd9b2ea0cf836a3cecaf2018cce66b50a5bb912ec1439d9aa871b697ea1e660f6cb4404d1329c4583a5cb1c0e85a9dbb1fed7bbf1b3
- SSDEEP
  
  3072:zn4cV8gf2u41Z5tKlFxwHdIWKc8DAGhn8D5sAxvEbzNmBTq/lSKVtB/LFYYSNGGv:74y8gOl2COc8rWD5n+9sTq9TVbRYK6B
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy