ramnit | 18e94896957047a684b75fafecf551e0719e15ae67d7b49c201fc489905fbd15

General

Target
2026-09-12_44877ce92237a75134acc722d98c90ef_elex_ramnit_wannacry
Size 539KB
Sample260913-c692wsswey
SHA256 18e94896957047a684b75fafecf551e0719e15ae67d7b49c201fc489905fbd15
MD5 44877ce92237a75134acc722d98c90ef
SHA1 ceda9b1ef9034605b2423eb3e6a0741b72be3f00
SHA512 4d6121f985270e8703fb71fbc70c44201efb197af16844ccb0f1d8967bbfd280b4b07aba6444d41a696c40d696568c22e964742e9bef9aff35c9b783d17fb984
SSDEEP 6144:OGkNeugsYW02QnZlmR75Yi2X3IQCn3fjA9VZFzUxXOdy/KkicWM+5nXwB/4iPrC:OGruf026ZlmR70Y/k9VS+LPMR94Sr
TLSH
T173C4491639FCC73BE3D39530CE6CFB90B0F5B9684F21489736D4191C2A76986A316A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-09-12_44877ce92237a75134acc722d98c90ef_elex_ramnit_wannacry
- Size 539KB
- SHA256 18e94896957047a684b75fafecf551e0719e15ae67d7b49c201fc489905fbd15
- MD5 44877ce92237a75134acc722d98c90ef
- SHA1 ceda9b1ef9034605b2423eb3e6a0741b72be3f00
- SHA512 4d6121f985270e8703fb71fbc70c44201efb197af16844ccb0f1d8967bbfd280b4b07aba6444d41a696c40d696568c22e964742e9bef9aff35c9b783d17fb984
- SSDEEP 6144:OGkNeugsYW02QnZlmR75Yi2X3IQCn3fjA9VZFzUxXOdy/KkicWM+5nXwB/4iPrC:OGruf026ZlmR70Y/k9VS+LPMR94Sr
- TLSH
  T173C4491639FCC73BE3D39530CE6CFB90B0F5B9684F21489736D4191C2A76986A316A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

adware banker discovery ramnit spyware stealer trojan upx worm
- Family: Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- UPX dump on OEP (original entry point)
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: Ramnit

UPX dump on OEP (original entry point)

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2