ramnit | 25c536c7ccf82e0c7bfcf5b53deec857d4a4de7892503dcaa275f5f8c3ab7c7f | Triage

Submit
Reports

Overview

overview

Static

static

3

25c536c7cc...7f.exe

windows7-x64

25c536c7cc...7f.exe

windows10-2004-x64

Sharing

General

Target

25c536c7ccf82e0c7bfcf5b53deec857d4a4de7892503dcaa275f5f8c3ab7c7f.exe
Size

640KB
Sample

250127-kb3y4a1mbp
MD5

9e457524c53a324524ed2cb6ac47b364
SHA1

6f6c1a73cacd79495579e14fa68f3c970ec9f8f5
SHA256

25c536c7ccf82e0c7bfcf5b53deec857d4a4de7892503dcaa275f5f8c3ab7c7f
SHA512

e7bd936e7532272120d469c1f5a0a0b8139d87d3b271a2833a284885b89f50bade4c868d2934d56434d48f03354f82995ce73195a8f2aa5b3d01b42131d38dd0
SSDEEP

12288:72f+zZvZ5kjAcUFc2yV7zIFDIyWOy6ba3yd4QCZUv5YYYkx9:7ROQa3e4JZ8YkL

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

25c536c7ccf82e0c7bfcf5b53deec857d4a4de7892503dcaa275f5f8c3ab7c7f.exe

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

120 seconds

Behavioral task

behavioral2

Sample

25c536c7ccf82e0c7bfcf5b53deec857d4a4de7892503dcaa275f5f8c3ab7c7f.exe

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

11 signatures

120 seconds

Malware Config

Targets

- Target
  
  25c536c7ccf82e0c7bfcf5b53deec857d4a4de7892503dcaa275f5f8c3ab7c7f.exe
- Size
  
  640KB
- MD5
  
  9e457524c53a324524ed2cb6ac47b364
- SHA1
  
  6f6c1a73cacd79495579e14fa68f3c970ec9f8f5
- SHA256
  
  25c536c7ccf82e0c7bfcf5b53deec857d4a4de7892503dcaa275f5f8c3ab7c7f
- SHA512
  
  e7bd936e7532272120d469c1f5a0a0b8139d87d3b271a2833a284885b89f50bade4c868d2934d56434d48f03354f82995ce73195a8f2aa5b3d01b42131d38dd0
- SSDEEP
  
  12288:72f+zZvZ5kjAcUFc2yV7zIFDIyWOy6ba3yd4QCZUv5YYYkx9:7ROQa3e4JZ8YkL
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy