ramnit | 61003e1acd364e6b9b2926b3704ff0f8d3948d1874374f9e992664500b32a16e

General

Target
2026-09-12_5e45825d4ef1676e0b7117e0e7203a94_elex_ramnit_wannacry
Size 539KB
Sample260913-bcyw4ada94
SHA256 61003e1acd364e6b9b2926b3704ff0f8d3948d1874374f9e992664500b32a16e
MD5 5e45825d4ef1676e0b7117e0e7203a94
SHA1 169bb57cd3e86e86d58950197bf1eee81b9cb278
SHA512 eeba350b097b1a8c9710b789d6e059b39046e08b800e2d339e5f530682568f03ff14c9c5c8f3369fa913911e93e0119789c664aec1093967dc3e94cefd1de202
SSDEEP 12288:OGruf026ZlmR70Y/k9VS+LPMRY8DSG6NF:buf0XoxUS+Lke8DSG6NF
TLSH
T136C44A0639FCC73BE3D25530CE6CFB90B0F5B9684F21489736D4191C2A76996E31AA2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-09-12_5e45825d4ef1676e0b7117e0e7203a94_elex_ramnit_wannacry
- Size 539KB
- SHA256 61003e1acd364e6b9b2926b3704ff0f8d3948d1874374f9e992664500b32a16e
- MD5 5e45825d4ef1676e0b7117e0e7203a94
- SHA1 169bb57cd3e86e86d58950197bf1eee81b9cb278
- SHA512 eeba350b097b1a8c9710b789d6e059b39046e08b800e2d339e5f530682568f03ff14c9c5c8f3369fa913911e93e0119789c664aec1093967dc3e94cefd1de202
- SSDEEP 12288:OGruf026ZlmR70Y/k9VS+LPMRY8DSG6NF:buf0XoxUS+Lke8DSG6NF
- TLSH
  T136C44A0639FCC73BE3D25530CE6CFB90B0F5B9684F21489736D4191C2A76996E31AA2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

adware banker discovery ramnit spyware stealer trojan upx worm
- Family: Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- UPX dump on OEP (original entry point)
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: Ramnit

UPX dump on OEP (original entry point)

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2