ramnit | d610d435c7a45124781f99b44c38213340aa4bd261a8c32d9d6bff16eecdd1ad | Triage

Submit
Reports

Overview

overview

Static

static

1

63bc6944bb...8.html

windows7-x64

63bc6944bb...8.html

windows10-2004-x64

1

Sharing

General

Target

63bc6944bb6e11c7ab277e5cdac317dd_JaffaCakes118
Size

220KB
Sample

240521-sj14gaaa28
MD5

63bc6944bb6e11c7ab277e5cdac317dd
SHA1

424be1b908b5afeb58fd151cfcc25b8d31433e0b
SHA256

d610d435c7a45124781f99b44c38213340aa4bd261a8c32d9d6bff16eecdd1ad
SHA512

06996cb2a1d432fc265c236918c3075e466a92cf37f6a680bd0c15b4cbed3c5223a703fe2f01e5a9f6cff2cc8b068538dbd8e2a1737d53eb47e6a14159aa0f4c
SSDEEP

3072:S060GolNbWyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFis:SX4sMYod+X3oI+Yn86/U9jFis

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

63bc6944bb6e11c7ab277e5cdac317dd_JaffaCakes118.html

Resource

win7-20240221-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

63bc6944bb6e11c7ab277e5cdac317dd_JaffaCakes118.html

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  63bc6944bb6e11c7ab277e5cdac317dd_JaffaCakes118
- Size
  
  220KB
- MD5
  
  63bc6944bb6e11c7ab277e5cdac317dd
- SHA1
  
  424be1b908b5afeb58fd151cfcc25b8d31433e0b
- SHA256
  
  d610d435c7a45124781f99b44c38213340aa4bd261a8c32d9d6bff16eecdd1ad
- SHA512
  
  06996cb2a1d432fc265c236918c3075e466a92cf37f6a680bd0c15b4cbed3c5223a703fe2f01e5a9f6cff2cc8b068538dbd8e2a1737d53eb47e6a14159aa0f4c
- SSDEEP
  
  3072:S060GolNbWyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFis:SX4sMYod+X3oI+Yn86/U9jFis
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy