ramnit | 28394eac948735c4b7a47a4c3b7a764de2dcdd8f4b952ec88c5b3d794e74ca5b | Triage

Submit
Reports

Overview

overview

Static

static

3

6c75a12194...18.exe

windows7-x64

6c75a12194...18.exe

windows10-2004-x64

3

Sharing

General

Target

6c75a1219479f1abcb8809651a3b3141_JaffaCakes118
Size

155KB
Sample

240523-2c9xgabc64
MD5

6c75a1219479f1abcb8809651a3b3141
SHA1

f3cddd4bd85f92b0aae37eee11f4c30594e68540
SHA256

28394eac948735c4b7a47a4c3b7a764de2dcdd8f4b952ec88c5b3d794e74ca5b
SHA512

d94a3e532b2a8a77d14dc9a660d353d66ec4850bbdac532d0fd8baeaf955d0a9e6d4bff1d79b11d4f6b39d277242012f356521469903344ae4edb4f1a8527685
SSDEEP

1536:hkO1U9fo2rTqfGRoJ410ibKvhog+bciy8nwsSAwR/SnglkmZX97uDAhsKEGB:hk59fo2r2f0oJDib8iLws7ngPwAGKEG

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

6c75a1219479f1abcb8809651a3b3141_JaffaCakes118.exe

Resource

win7-20240221-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

6c75a1219479f1abcb8809651a3b3141_JaffaCakes118.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  
  6c75a1219479f1abcb8809651a3b3141_JaffaCakes118
- Size
  
  155KB
- MD5
  
  6c75a1219479f1abcb8809651a3b3141
- SHA1
  
  f3cddd4bd85f92b0aae37eee11f4c30594e68540
- SHA256
  
  28394eac948735c4b7a47a4c3b7a764de2dcdd8f4b952ec88c5b3d794e74ca5b
- SHA512
  
  d94a3e532b2a8a77d14dc9a660d353d66ec4850bbdac532d0fd8baeaf955d0a9e6d4bff1d79b11d4f6b39d277242012f356521469903344ae4edb4f1a8527685
- SSDEEP
  
  1536:hkO1U9fo2rTqfGRoJ410ibKvhog+bciy8nwsSAwR/SnglkmZX97uDAhsKEGB:hk59fo2r2f0oJDib8iLws7ngPwAGKEG
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy