ramnit | b3405208e09008dd9a9d4e5845e647cf0bf9340d782ab0854e96e4b59cf9823d | Triage

Submit
Reports

Overview

overview

Static

static

1

2d454c2b6c...8.html

windows7-x64

2d454c2b6c...8.html

windows10-2004-x64

1

Sharing

General

Target

2d454c2b6c79533b97ebd75abc41a6bf_JaffaCakes118
Size

196KB
Sample

240510-erhefadd84
MD5

2d454c2b6c79533b97ebd75abc41a6bf
SHA1

7545b89f0dee075b201618e28f77c81400ba85ec
SHA256

b3405208e09008dd9a9d4e5845e647cf0bf9340d782ab0854e96e4b59cf9823d
SHA512

3c7806a056856e6913350eb1673a5bbfd9e13627e9d924d32b1557ab0fa64cb254bfad9a69394b85dae956296f09c2532103124d4f307c62229c9e0a1826b832
SSDEEP

3072:SGMcfyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFis:SnrsMYod+X3oI+Yn86/U9jFis

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

2d454c2b6c79533b97ebd75abc41a6bf_JaffaCakes118.html

Resource

win7-20240419-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

2d454c2b6c79533b97ebd75abc41a6bf_JaffaCakes118.html

Resource

win10v2004-20240426-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  2d454c2b6c79533b97ebd75abc41a6bf_JaffaCakes118
- Size
  
  196KB
- MD5
  
  2d454c2b6c79533b97ebd75abc41a6bf
- SHA1
  
  7545b89f0dee075b201618e28f77c81400ba85ec
- SHA256
  
  b3405208e09008dd9a9d4e5845e647cf0bf9340d782ab0854e96e4b59cf9823d
- SHA512
  
  3c7806a056856e6913350eb1673a5bbfd9e13627e9d924d32b1557ab0fa64cb254bfad9a69394b85dae956296f09c2532103124d4f307c62229c9e0a1826b832
- SSDEEP
  
  3072:SGMcfyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFis:SnrsMYod+X3oI+Yn86/U9jFis
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy