ramnit | 412dcdfe163327057dbba0d5b0d308e1300724ccf7e12bb982d36efa5b5b479b | Triage

Submit
Reports

Overview

overview

Static

static

1

6583205a84...8.html

windows7-x64

6583205a84...8.html

windows10-2004-x64

1

Sharing

General

Target

6583205a84770fecb5fbe69c9d0f9b72_JaffaCakes118
Size

159KB
Sample

240522-br81lsga7x
MD5

6583205a84770fecb5fbe69c9d0f9b72
SHA1

a914af77aac77a7c6ec13a27d1722d274f8d0bf1
SHA256

412dcdfe163327057dbba0d5b0d308e1300724ccf7e12bb982d36efa5b5b479b
SHA512

a0086fa430ac5e04c4c38a9010406fdc2c5931bf0105a993692de80cbdea7a5ce8c83f332da3fd7c5f1943538daaba53d308e26682cccf0a2ba671f7191dcffe
SSDEEP

3072:iX5urFVmI88+yfkMY+BES09JXAnyrZalI+YQ:ipubsMYod+X3oI+YQ

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

6583205a84770fecb5fbe69c9d0f9b72_JaffaCakes118.html

Resource

win7-20240508-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

6583205a84770fecb5fbe69c9d0f9b72_JaffaCakes118.html

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  6583205a84770fecb5fbe69c9d0f9b72_JaffaCakes118
- Size
  
  159KB
- MD5
  
  6583205a84770fecb5fbe69c9d0f9b72
- SHA1
  
  a914af77aac77a7c6ec13a27d1722d274f8d0bf1
- SHA256
  
  412dcdfe163327057dbba0d5b0d308e1300724ccf7e12bb982d36efa5b5b479b
- SHA512
  
  a0086fa430ac5e04c4c38a9010406fdc2c5931bf0105a993692de80cbdea7a5ce8c83f332da3fd7c5f1943538daaba53d308e26682cccf0a2ba671f7191dcffe
- SSDEEP
  
  3072:iX5urFVmI88+yfkMY+BES09JXAnyrZalI+YQ:ipubsMYod+X3oI+YQ
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy