ramnit | 99ee6fcafff68296f0660a9eb028fcf17cd88d0b9c887dd145ba54911e8c4dd8 | Triage™

Login
Reports

Overview

overview

Static

static

3

99ee6fcaff...d8.dll

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
99ee6fcafff68296f0660a9eb028fcf17cd88d0b9c887dd145ba54911e8c4dd8
Size 472KB
Sample260829-1a6llavblg
SHA256 99ee6fcafff68296f0660a9eb028fcf17cd88d0b9c887dd145ba54911e8c4dd8
MD5 2e9b2a0a76bee8a52371500cc6fac19f
SHA1 4835196e90cdea932f1384f2cfdf90592a775915
SHA512 e7c670a4eb22b73f4d6f08b83ca2f611539b22dcd41b74204e5b9b2a8c4b074340b4385ff8de3935d912bee7d117fb25c1128ad3c2b48d22e1955067ce16ca96
SSDEEP 12288:+ehnaNPpSVZmNxRCwnwm3W3OHIIf5tA9N6+F:+eh0PpS6NxNnwYeOHXHAb6q
TLSH
T121A4AE02B2E0C07BC54D057C0A47D7A9AABC7DD6B979C987BBC8CA8E4E737416E18315
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

ramnit adware banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

99ee6fcafff68296f0660a9eb028fcf17cd88d0b9c887dd145ba54911e8c4dd8.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

13 signatures

150 seconds

adware banker discovery ramnit spyware stealer trojan upx worm

Malware Config

Targets

- Target
  99ee6fcafff68296f0660a9eb028fcf17cd88d0b9c887dd145ba54911e8c4dd8
- Size 472KB
- SHA256 99ee6fcafff68296f0660a9eb028fcf17cd88d0b9c887dd145ba54911e8c4dd8
- MD5 2e9b2a0a76bee8a52371500cc6fac19f
- SHA1 4835196e90cdea932f1384f2cfdf90592a775915
- SHA512 e7c670a4eb22b73f4d6f08b83ca2f611539b22dcd41b74204e5b9b2a8c4b074340b4385ff8de3935d912bee7d117fb25c1128ad3c2b48d22e1955067ce16ca96
- SSDEEP 12288:+ehnaNPpSVZmNxRCwnwm3W3OHIIf5tA9N6+F:+eh0PpS6NxNnwYeOHXHAb6q
- TLSH
  T121A4AE02B2E0C07BC54D057C0A47D7A9AABC7DD6B979C987BBC8CA8E4E737416E18315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

adware banker discovery ramnit spyware stealer trojan upx worm
- Family: Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarebankerdiscoveryramnitspywarestealertrojanupxworm

© 2018-2026

Terms | Privacy