ramnit | 488276d7fea88fd2cd48bdb6261127bf5c8e87049c679c0b8174d5f2cc8454ea

General

Target
2026-09-24_987e3341a984c6a5982f82ecd38addc4_elex_ramnit_wannacry
Size 539KB
Sample260925-egkrtayeme
SHA256 488276d7fea88fd2cd48bdb6261127bf5c8e87049c679c0b8174d5f2cc8454ea
MD5 987e3341a984c6a5982f82ecd38addc4
SHA1 4a8aea0fb8a36de1ae7d272667cb6f6d6cde1646
SHA512 623f3a2a566355cd86178443095581670fcfd441a290bace637ce56b71c9a67aff96a31aa61a4c0967432b48a8ac6a96cd10c9c7ca9a5c86d98c215c8c10df8e
SSDEEP 6144:OGkNeugsYW02QnZlmR75Yi2X3IQCn3fjA9VZFzUxXOdy/KkicWM+5nXwBaxlvqG1:OGruf026ZlmR70Y/k9VS+LPMRqvqG1
TLSH
T170C4491639FCC73BE3D25530CE6CFB90B0F5B9684F21489736D4191C2A76992E31AA2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-09-24_987e3341a984c6a5982f82ecd38addc4_elex_ramnit_wannacry
- Size 539KB
- SHA256 488276d7fea88fd2cd48bdb6261127bf5c8e87049c679c0b8174d5f2cc8454ea
- MD5 987e3341a984c6a5982f82ecd38addc4
- SHA1 4a8aea0fb8a36de1ae7d272667cb6f6d6cde1646
- SHA512 623f3a2a566355cd86178443095581670fcfd441a290bace637ce56b71c9a67aff96a31aa61a4c0967432b48a8ac6a96cd10c9c7ca9a5c86d98c215c8c10df8e
- SSDEEP 6144:OGkNeugsYW02QnZlmR75Yi2X3IQCn3fjA9VZFzUxXOdy/KkicWM+5nXwBaxlvqG1:OGruf026ZlmR70Y/k9VS+LPMRqvqG1
- TLSH
  T170C4491639FCC73BE3D25530CE6CFB90B0F5B9684F21489736D4191C2A76992E31AA2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

adware banker discovery ramnit spyware stealer trojan upx worm
- Family: Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- UPX dump on OEP (original entry point)
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: Ramnit

UPX dump on OEP (original entry point)

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2