ramnit | 4a5c9726fd1a412d79168c5e33a60d131bc66a3157e45e5d182f99468ab5d07f | Triage

Submit
Reports

Overview

overview

Static

static

3

4a5c9726fd...7f.dll

windows7-x64

4a5c9726fd...7f.dll

windows10-2004-x64

Sharing

General

Target

4a5c9726fd1a412d79168c5e33a60d131bc66a3157e45e5d182f99468ab5d07f
Size

232KB
Sample

250122-alt4tsykdz
MD5

402e6b27b3e8accf40f207cdcb37272e
SHA1

87ec6a58d8ed5e9d1356b3665630f0f07db6f32f
SHA256

4a5c9726fd1a412d79168c5e33a60d131bc66a3157e45e5d182f99468ab5d07f
SHA512

07a2d93ed2508eb445a54acb56d353964e5b2efb8feb5eb8718af153ddb5e5c67eec4ac1f406c551c9068460164a8c2c43bfe808cb61b078bc5a06bc30d87b80
SSDEEP

3072:O60GDiOhS8WSWeSs64jxYtxjKTB/oMpl8aXYQ+cIPKc+4:TlhS8WS1Ss6AqKT59pl82O9p

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

4a5c9726fd1a412d79168c5e33a60d131bc66a3157e45e5d182f99468ab5d07f.dll

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

4a5c9726fd1a412d79168c5e33a60d131bc66a3157e45e5d182f99468ab5d07f.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  4a5c9726fd1a412d79168c5e33a60d131bc66a3157e45e5d182f99468ab5d07f
- Size
  
  232KB
- MD5
  
  402e6b27b3e8accf40f207cdcb37272e
- SHA1
  
  87ec6a58d8ed5e9d1356b3665630f0f07db6f32f
- SHA256
  
  4a5c9726fd1a412d79168c5e33a60d131bc66a3157e45e5d182f99468ab5d07f
- SHA512
  
  07a2d93ed2508eb445a54acb56d353964e5b2efb8feb5eb8718af153ddb5e5c67eec4ac1f406c551c9068460164a8c2c43bfe808cb61b078bc5a06bc30d87b80
- SSDEEP
  
  3072:O60GDiOhS8WSWeSs64jxYtxjKTB/oMpl8aXYQ+cIPKc+4:TlhS8WS1Ss6AqKT59pl82O9p
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy