ramnit | b9922408b4aad33650668f7a7873d2df1b55717f67a0cf1b1ce3b9129660b5f5

General

Target
2026-08-20_35992e7cf5092617b33c2e163f183fc7_amadey_elex_glassworm_icedid_ramnit_smoke-loader
Size 2.5MB
Sample260821-ax2m2ss1fs
SHA256 b9922408b4aad33650668f7a7873d2df1b55717f67a0cf1b1ce3b9129660b5f5
MD5 35992e7cf5092617b33c2e163f183fc7
SHA1 f4b250602f6c6e76ba2db9b59918abe01b1cb339
SHA512 cba1a51b1ba7f2e01c74c59ba8ac5f6da110f32a6bbb7f2a82378747eb643f1c32a1dd4c6991f361321d8541bbc3fc2ec83b89c0b40a102cf043df3a16937bcb
SSDEEP 49152:2RSUNBcRi7XVLReqCXiuizoLbZrxYPTXtAkg+QYf8ogb5UCLgsZbj8HW9HTI58B:2tNZXdTCXiuizwR+PTXtAkg+QYsyCLgu
TLSH
T181C58E31BBA18036D26771318569BB7D6275B5E28BB942CB13A81A3C2D70BD35D38337
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-20_35992e7cf5092617b33c2e163f183fc7_amadey_elex_glassworm_icedid_ramnit_smoke-loader
- Size 2.5MB
- SHA256 b9922408b4aad33650668f7a7873d2df1b55717f67a0cf1b1ce3b9129660b5f5
- MD5 35992e7cf5092617b33c2e163f183fc7
- SHA1 f4b250602f6c6e76ba2db9b59918abe01b1cb339
- SHA512 cba1a51b1ba7f2e01c74c59ba8ac5f6da110f32a6bbb7f2a82378747eb643f1c32a1dd4c6991f361321d8541bbc3fc2ec83b89c0b40a102cf043df3a16937bcb
- SSDEEP 49152:2RSUNBcRi7XVLReqCXiuizoLbZrxYPTXtAkg+QYf8ogb5UCLgsZbj8HW9HTI58B:2tNZXdTCXiuizwR+PTXtAkg+QYsyCLgu
- TLSH
  T181C58E31BBA18036D26771318569BB7D6275B5E28BB942CB13A81A3C2D70BD35D38337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

adware banker discovery ramnit spyware stealer trojan upx worm
- Family: Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- UPX dump on OEP (original entry point)
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: Ramnit

UPX dump on OEP (original entry point)

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2