ramnit | 8df065c19c76eeada3399c41c3a8177ce47713a5205519cdeea9f7f8e2429d9c

General

Target
2026-09-11_8773fdb5485fdc1a8512d4822a0ad6d2_elex_ramnit_wannacry
Size 539KB
Sample260912-jxxtjafg66
SHA256 8df065c19c76eeada3399c41c3a8177ce47713a5205519cdeea9f7f8e2429d9c
MD5 8773fdb5485fdc1a8512d4822a0ad6d2
SHA1 bdec0c16d13fa3d78f356d93f70694ca859f4bdb
SHA512 15d9d77274fdb97619abdc70cc70cf4eaaa672601444bf4c58ff1673ab2c6130396c415ee1bda888ce16469522a23c72fc104b034d4dd50d94fbdd6790da1f1a
SSDEEP 6144:OGkNeugsYW02QnZlmR75Yi2X3IQCn3fjA9VZFzUxXOdy/KkicWM+5nXwB/GptrDv:OGruf026ZlmR70Y/k9VS+LPMRtGph
TLSH
T14DC43A0639FCC73BE3D29530CE6DFB90B0F5B9684F21489736D4191C2A76986E316A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-09-11_8773fdb5485fdc1a8512d4822a0ad6d2_elex_ramnit_wannacry
- Size 539KB
- SHA256 8df065c19c76eeada3399c41c3a8177ce47713a5205519cdeea9f7f8e2429d9c
- MD5 8773fdb5485fdc1a8512d4822a0ad6d2
- SHA1 bdec0c16d13fa3d78f356d93f70694ca859f4bdb
- SHA512 15d9d77274fdb97619abdc70cc70cf4eaaa672601444bf4c58ff1673ab2c6130396c415ee1bda888ce16469522a23c72fc104b034d4dd50d94fbdd6790da1f1a
- SSDEEP 6144:OGkNeugsYW02QnZlmR75Yi2X3IQCn3fjA9VZFzUxXOdy/KkicWM+5nXwB/GptrDv:OGruf026ZlmR70Y/k9VS+LPMRtGph
- TLSH
  T14DC43A0639FCC73BE3D29530CE6DFB90B0F5B9684F21489736D4191C2A76986E316A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

adware banker discovery ramnit spyware stealer trojan upx worm
- Family: Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- UPX dump on OEP (original entry point)
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: Ramnit

UPX dump on OEP (original entry point)

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2