ramnit | 5ba4699ba1e570351718b58ad023fe6df045df093717bccb9824a30aab0e4d3d

General

Target
2026-10-11_44de4d5a48375cc9bc56c5736be26883_elex_ramnit_wannacry
Size 539KB
Sample261012-22hvaafa59
SHA256 5ba4699ba1e570351718b58ad023fe6df045df093717bccb9824a30aab0e4d3d
MD5 44de4d5a48375cc9bc56c5736be26883
SHA1 4f50933665e4360b9057badf9ac8a5a126a06082
SHA512 d09004696c69845b9ba761b6e67974605c4e4fa7d983814a68da607e28c60ac9e5efa18ce50f4da61d738c77cc473527e97ab120dad558a1d3206db6daf04a1b
SSDEEP 6144:OGkNeugsYW02QnZlmR75Yi2X3IQCn3fjA9VZFzUxXOdy/KkicWM+5nXwBNb9qu7:OGruf026ZlmR70Y/k9VS+LPMRLbc
TLSH
T1B0C4491639FCC73BE3D25530CE6CFB90B0F5B9684F21489736D4191C2A76992E31AA2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-10-11_44de4d5a48375cc9bc56c5736be26883_elex_ramnit_wannacry
- Size 539KB
- SHA256 5ba4699ba1e570351718b58ad023fe6df045df093717bccb9824a30aab0e4d3d
- MD5 44de4d5a48375cc9bc56c5736be26883
- SHA1 4f50933665e4360b9057badf9ac8a5a126a06082
- SHA512 d09004696c69845b9ba761b6e67974605c4e4fa7d983814a68da607e28c60ac9e5efa18ce50f4da61d738c77cc473527e97ab120dad558a1d3206db6daf04a1b
- SSDEEP 6144:OGkNeugsYW02QnZlmR75Yi2X3IQCn3fjA9VZFzUxXOdy/KkicWM+5nXwBNb9qu7:OGruf026ZlmR70Y/k9VS+LPMRLbc
- TLSH
  T1B0C4491639FCC73BE3D25530CE6CFB90B0F5B9684F21489736D4191C2A76992E31AA2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

adware banker discovery ramnit spyware stealer trojan upx worm
- Family: Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- UPX dump on OEP (original entry point)
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: Ramnit

UPX dump on OEP (original entry point)

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2