ramnit | a6952d44560588b52d267e8bbf67630640e160fcf6d981f7dfca5b42ef1bff3b

General

Target
2026-09-23_2cc72115e4274d013bf6b299e3d9c172_elex_ramnit_wannacry
Size 539KB
Sample260923-cs3qnacd95
SHA256 a6952d44560588b52d267e8bbf67630640e160fcf6d981f7dfca5b42ef1bff3b
MD5 2cc72115e4274d013bf6b299e3d9c172
SHA1 1ba179a91235dc3645054c8ebceea5e289ad1685
SHA512 e88a3072cdbee05033df06af4f4e1aeae7632bd1d65c47ec8d838dcdd82405716d29bb3b9c09e4964eb9a2f2e75b2b6deeb8b0f69a8f4f9e237eb5f3495d9cde
SSDEEP 6144:OGkNeugsYW02QnZlmR75Yi2X3IQCn3fjA9VZFzUxXOdy/KkicWM+5nXwBeshSQdW:OGruf026ZlmR70Y/k9VS+LPMRIsA
TLSH
T1BFC4391639FCC73BE3D39530CE6CBB90B0F5B9684F21489736D4191C2A76986E316A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-09-23_2cc72115e4274d013bf6b299e3d9c172_elex_ramnit_wannacry
- Size 539KB
- SHA256 a6952d44560588b52d267e8bbf67630640e160fcf6d981f7dfca5b42ef1bff3b
- MD5 2cc72115e4274d013bf6b299e3d9c172
- SHA1 1ba179a91235dc3645054c8ebceea5e289ad1685
- SHA512 e88a3072cdbee05033df06af4f4e1aeae7632bd1d65c47ec8d838dcdd82405716d29bb3b9c09e4964eb9a2f2e75b2b6deeb8b0f69a8f4f9e237eb5f3495d9cde
- SSDEEP 6144:OGkNeugsYW02QnZlmR75Yi2X3IQCn3fjA9VZFzUxXOdy/KkicWM+5nXwBeshSQdW:OGruf026ZlmR70Y/k9VS+LPMRIsA
- TLSH
  T1BFC4391639FCC73BE3D39530CE6CBB90B0F5B9684F21489736D4191C2A76986E316A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

adware banker discovery ramnit spyware stealer trojan upx worm
- Family: Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- UPX dump on OEP (original entry point)
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: Ramnit

UPX dump on OEP (original entry point)

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2