ramnit | 71f28dc740863848f603defc0ce7b0ef1468283a3c6d4a6b9d75617e3a6fc557 | Triage

Submit
Reports

Overview

overview

Static

static

1

6b09068975...8.html

windows7-x64

6b09068975...8.html

windows10-2004-x64

1

Sharing

General

Target

6b09068975703042edb1325ff5240d77_JaffaCakes118
Size

135KB
Sample

240523-qcldbsbh6z
MD5

6b09068975703042edb1325ff5240d77
SHA1

5c7f82bc6ae1d8604fb5df760b8bbfd17f7b20ec
SHA256

71f28dc740863848f603defc0ce7b0ef1468283a3c6d4a6b9d75617e3a6fc557
SHA512

7785dfa0562a01b364a13c144443bb412265e08dc8050f4d286e12414f47907da0169f41b9d7d0e4919ded501b8a385d24b3da9ddb8303087040bdf1d2d14193
SSDEEP

3072:SESKaNX9WyfkMY+BES09JXAnyrZalI+YQ:SNrNXpsMYod+X3oI+YQ

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

6b09068975703042edb1325ff5240d77_JaffaCakes118.html

Resource

win7-20240508-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

6b09068975703042edb1325ff5240d77_JaffaCakes118.html

Resource

win10v2004-20240426-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  6b09068975703042edb1325ff5240d77_JaffaCakes118
- Size
  
  135KB
- MD5
  
  6b09068975703042edb1325ff5240d77
- SHA1
  
  5c7f82bc6ae1d8604fb5df760b8bbfd17f7b20ec
- SHA256
  
  71f28dc740863848f603defc0ce7b0ef1468283a3c6d4a6b9d75617e3a6fc557
- SHA512
  
  7785dfa0562a01b364a13c144443bb412265e08dc8050f4d286e12414f47907da0169f41b9d7d0e4919ded501b8a385d24b3da9ddb8303087040bdf1d2d14193
- SSDEEP
  
  3072:SESKaNX9WyfkMY+BES09JXAnyrZalI+YQ:SNrNXpsMYod+X3oI+YQ
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy