ramnit | efd79309bb95160d333c53c7205b0900797e896b1eaf1708574af67471ea8faa

General

Target
2026-09-12_376611a61054e2b500f4758ab8b582f0_elex_ramnit_wannacry
Size 539KB
Sample260913-d4ecwas1dt
SHA256 efd79309bb95160d333c53c7205b0900797e896b1eaf1708574af67471ea8faa
MD5 376611a61054e2b500f4758ab8b582f0
SHA1 31978497187cd75143fea41406d2884260229381
SHA512 7c34be491b760d58f1d102f1d22a8c5be0f715669d84b16849361cdda0ace45d43c3c1c8cccecc6048f16cb261f839b96ad814a789444e32b9ce43ddd300536b
SSDEEP 12288:OGruf026ZlmR70Y/k9VS+LPMR6gXDzNAq:buf0XoxUS+Lko0fi
TLSH
T13EC44A0639FCC73BE3D29530CE6DFB90B0F5B9684F21489736D4191C2A76992E316A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-09-12_376611a61054e2b500f4758ab8b582f0_elex_ramnit_wannacry
- Size 539KB
- SHA256 efd79309bb95160d333c53c7205b0900797e896b1eaf1708574af67471ea8faa
- MD5 376611a61054e2b500f4758ab8b582f0
- SHA1 31978497187cd75143fea41406d2884260229381
- SHA512 7c34be491b760d58f1d102f1d22a8c5be0f715669d84b16849361cdda0ace45d43c3c1c8cccecc6048f16cb261f839b96ad814a789444e32b9ce43ddd300536b
- SSDEEP 12288:OGruf026ZlmR70Y/k9VS+LPMR6gXDzNAq:buf0XoxUS+Lko0fi
- TLSH
  T13EC44A0639FCC73BE3D29530CE6DFB90B0F5B9684F21489736D4191C2A76992E316A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

adware banker discovery ramnit spyware stealer trojan upx worm
- Family: Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- UPX dump on OEP (original entry point)
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: Ramnit

UPX dump on OEP (original entry point)

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2