ramnit | 878acd16f0058ec97f849c05d098799d3f1383cd1c05c21955d213a12107b7b9

General

Target
2026-09-12_7e9e5b4c729caa2b7334a0fbe648a7d3_elex_ramnit_wannacry
Size 596KB
Sample260912-2repwawhnc
SHA256 878acd16f0058ec97f849c05d098799d3f1383cd1c05c21955d213a12107b7b9
MD5 7e9e5b4c729caa2b7334a0fbe648a7d3
SHA1 2fbfbf64c41a292bbe1a78202905e8639771de94
SHA512 87e1aac814cad8bf2e85b921f440c16d9fabb42f9a9560af87d296c83f9dc15cbf1024e339e1d13b20a0ab4c5bd7ef42eb3f3033ebea74e26f948996ce46fbe5
SSDEEP 12288:HGruf026ZlmR70Y/k9VS+LPMRsbcgx7CnS:auf0XoxUS+LkmR
TLSH
T17CD45A1639FCC73BE3D35530CE6CBB90B0F5B9684F21489736D4291C2A76986E31AA1D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-09-12_7e9e5b4c729caa2b7334a0fbe648a7d3_elex_ramnit_wannacry
- Size 596KB
- SHA256 878acd16f0058ec97f849c05d098799d3f1383cd1c05c21955d213a12107b7b9
- MD5 7e9e5b4c729caa2b7334a0fbe648a7d3
- SHA1 2fbfbf64c41a292bbe1a78202905e8639771de94
- SHA512 87e1aac814cad8bf2e85b921f440c16d9fabb42f9a9560af87d296c83f9dc15cbf1024e339e1d13b20a0ab4c5bd7ef42eb3f3033ebea74e26f948996ce46fbe5
- SSDEEP 12288:HGruf026ZlmR70Y/k9VS+LPMRsbcgx7CnS:auf0XoxUS+LkmR
- TLSH
  T17CD45A1639FCC73BE3D35530CE6CBB90B0F5B9684F21489736D4291C2A76986E31AA1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

adware banker discovery ramnit spyware stealer trojan upx worm
- Family: Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- UPX dump on OEP (original entry point)
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: Ramnit

UPX dump on OEP (original entry point)

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2