ramnit | 0202c5df4c3bbb7b18f41eac78486114ba64ceeb52813e50a40e83b64c6ec1a8 | Triage

Submit
Reports

Overview

overview

Static

static

1

6b1dda09c7...8.html

windows7-x64

6b1dda09c7...8.html

windows10-2004-x64

1

Sharing

General

Target

6b1dda09c70f4d10371ef07cdde39442_JaffaCakes118
Size

120KB
Sample

240523-qx5ygadc38
MD5

6b1dda09c70f4d10371ef07cdde39442
SHA1

7490ee6f2f1c52ad68b29eb1bf03044f849f9d0b
SHA256

0202c5df4c3bbb7b18f41eac78486114ba64ceeb52813e50a40e83b64c6ec1a8
SHA512

2f2cef4295b899fd2f07d71c036acc56c760f06c7a972475f8dd27d8b5a3b1cec9ed1aebd05e009ea43f2f0a20da90f824cf1f938b3876a1b0abfc37858ddea1
SSDEEP

1536:SE2yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsn:SE2yfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

6b1dda09c70f4d10371ef07cdde39442_JaffaCakes118.html

Resource

win7-20240215-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

6b1dda09c70f4d10371ef07cdde39442_JaffaCakes118.html

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  6b1dda09c70f4d10371ef07cdde39442_JaffaCakes118
- Size
  
  120KB
- MD5
  
  6b1dda09c70f4d10371ef07cdde39442
- SHA1
  
  7490ee6f2f1c52ad68b29eb1bf03044f849f9d0b
- SHA256
  
  0202c5df4c3bbb7b18f41eac78486114ba64ceeb52813e50a40e83b64c6ec1a8
- SHA512
  
  2f2cef4295b899fd2f07d71c036acc56c760f06c7a972475f8dd27d8b5a3b1cec9ed1aebd05e009ea43f2f0a20da90f824cf1f938b3876a1b0abfc37858ddea1
- SSDEEP
  
  1536:SE2yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsn:SE2yfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy