ramnit | cbe02d9dda242b0fed2b78ccf78f7e7861fa8e34ca947edc7092bcbd03763d10 | Triage™

Login
Reports

Overview

overview

Static

static

3

cbe02d9dda...10.dll

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
cbe02d9dda242b0fed2b78ccf78f7e7861fa8e34ca947edc7092bcbd03763d10
Size 484KB
Sample260827-mm5yya11ft
SHA256 cbe02d9dda242b0fed2b78ccf78f7e7861fa8e34ca947edc7092bcbd03763d10
MD5 041a0ebf52eab2c6cefcb2ee1cf4f658
SHA1 4804181f22b0a37a0a2e7dcec20360b969192475
SHA512 db12e1de238b0797722b1fb308cb62a20f5276302bf30f8e458cd007c887b9c9e4b83e5cd9eb2a7d9fb9a710b5b1aa73a01d679177afc8e438953ddd47f41996
SSDEEP 6144:e0IEu0/l7rUdoqWMvjcw3sWSAoITM+NPUHFWn/kVKowqC///eTErGpoK:X79qXvjRc5AoIY+NPUlWnaKoDC/newG3
TLSH
T1EFB419AB73AC8CB7C2F6CDFE17DA859471FDEC90E4AA490656C036C939289E37516301
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

ramnit adware banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

cbe02d9dda242b0fed2b78ccf78f7e7861fa8e34ca947edc7092bcbd03763d10.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

14 signatures

150 seconds

adware banker discovery ramnit spyware stealer trojan upx worm

Malware Config

Targets

- Target
  cbe02d9dda242b0fed2b78ccf78f7e7861fa8e34ca947edc7092bcbd03763d10
- Size 484KB
- SHA256 cbe02d9dda242b0fed2b78ccf78f7e7861fa8e34ca947edc7092bcbd03763d10
- MD5 041a0ebf52eab2c6cefcb2ee1cf4f658
- SHA1 4804181f22b0a37a0a2e7dcec20360b969192475
- SHA512 db12e1de238b0797722b1fb308cb62a20f5276302bf30f8e458cd007c887b9c9e4b83e5cd9eb2a7d9fb9a710b5b1aa73a01d679177afc8e438953ddd47f41996
- SSDEEP 6144:e0IEu0/l7rUdoqWMvjcw3sWSAoITM+NPUHFWn/kVKowqC///eTErGpoK:X79qXvjRc5AoIY+NPUlWnaKoDC/newG3
- TLSH
  T1EFB419AB73AC8CB7C2F6CDFE17DA859471FDEC90E4AA490656C036C939289E37516301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

adware banker discovery ramnit spyware stealer trojan upx worm
- Family: Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarebankerdiscoveryramnitspywarestealertrojanupxworm

© 2018-2026

Terms | Privacy