ramnit | abb6d85f06b9a42c2937b1dcbf0c3c51cc6f2a1255af61d42044514b1ded169c

General

Target
2026-09-08_b51abe5405f1e645d42c3d5993cbafc3_elex_ramnit_wannacry
Size 539KB
Sample260910-dta8gavhmh
SHA256 abb6d85f06b9a42c2937b1dcbf0c3c51cc6f2a1255af61d42044514b1ded169c
MD5 b51abe5405f1e645d42c3d5993cbafc3
SHA1 0ff0ca1f8a9dab68a2ca7a6c72864b12ad0f585b
SHA512 79a446668fc3090d963666e744e1c5d727bc8a1a3fc9fa45340cbce2bd4b451dfcb385bcfa5f161e96bf12c5ffd21762ddbfe82b3b73070438385c2740979bde
SSDEEP 12288:OGruf026ZlmR70Y/k9VS+LPMRjrn0uPE:buf0XoxUS+Lk1rnBPE
TLSH
T1D4C4491639FCC73BE3D35530CE6DFB90B0F5BA684F21489736D4291C2A76982A316A1D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-09-08_b51abe5405f1e645d42c3d5993cbafc3_elex_ramnit_wannacry
- Size 539KB
- SHA256 abb6d85f06b9a42c2937b1dcbf0c3c51cc6f2a1255af61d42044514b1ded169c
- MD5 b51abe5405f1e645d42c3d5993cbafc3
- SHA1 0ff0ca1f8a9dab68a2ca7a6c72864b12ad0f585b
- SHA512 79a446668fc3090d963666e744e1c5d727bc8a1a3fc9fa45340cbce2bd4b451dfcb385bcfa5f161e96bf12c5ffd21762ddbfe82b3b73070438385c2740979bde
- SSDEEP 12288:OGruf026ZlmR70Y/k9VS+LPMRjrn0uPE:buf0XoxUS+Lk1rnBPE
- TLSH
  T1D4C4491639FCC73BE3D35530CE6DFB90B0F5BA684F21489736D4291C2A76982A316A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

adware banker discovery ramnit spyware stealer trojan upx worm
- Family: Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- UPX dump on OEP (original entry point)
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: Ramnit

UPX dump on OEP (original entry point)

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2