ramnit | 1f0437ae936a2fa5a166cdd0df75ddbc935a013aa1443a389246c5124a7e9e08 | Triage™

Login
Reports

Overview

overview

Static

static

3

1f0437ae93...08.dll

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
1f0437ae936a2fa5a166cdd0df75ddbc935a013aa1443a389246c5124a7e9e08
Size 1.9MB
Sample260825-v2ygeawgrd
SHA256 1f0437ae936a2fa5a166cdd0df75ddbc935a013aa1443a389246c5124a7e9e08
MD5 55b9a5ed0b5f6f7a9e770c9451de230b
SHA1 47e8f3bfbd3fcce5be58295f529b7230c42b602e
SHA512 09c35fa00fec75ccd05d285138059da43d6b9466de53a43a4b4b228d6df07b1a6a5b2cce017772dceba5b6b29856a047321184e706550d1678a224d61454da57
SSDEEP 24576:e7IY7a9IRCRqRPkHQo411810cNScGKJydXTZDwmzRMo3DP7x5nbiQjJ:GIY5RMHMf810Knor5zqo3zNJuQjJ
TLSH
T1A995AF027FED8178CA5E1134197E770E6A6AC36A3B284FCB7298FD099D327D0583E156
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

ramnit adware banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

1f0437ae936a2fa5a166cdd0df75ddbc935a013aa1443a389246c5124a7e9e08.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

14 signatures

150 seconds

adware banker discovery ramnit spyware stealer trojan upx worm

Malware Config

Targets

- Target
  1f0437ae936a2fa5a166cdd0df75ddbc935a013aa1443a389246c5124a7e9e08
- Size 1.9MB
- SHA256 1f0437ae936a2fa5a166cdd0df75ddbc935a013aa1443a389246c5124a7e9e08
- MD5 55b9a5ed0b5f6f7a9e770c9451de230b
- SHA1 47e8f3bfbd3fcce5be58295f529b7230c42b602e
- SHA512 09c35fa00fec75ccd05d285138059da43d6b9466de53a43a4b4b228d6df07b1a6a5b2cce017772dceba5b6b29856a047321184e706550d1678a224d61454da57
- SSDEEP 24576:e7IY7a9IRCRqRPkHQo411810cNScGKJydXTZDwmzRMo3DP7x5nbiQjJ:GIY5RMHMf810Knor5zqo3zNJuQjJ
- TLSH
  T1A995AF027FED8178CA5E1134197E770E6A6AC36A3B284FCB7298FD099D327D0583E156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

adware banker discovery ramnit spyware stealer trojan upx worm
- Family: Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarebankerdiscoveryramnitspywarestealertrojanupxworm

© 2018-2026

Terms | Privacy