ramnit | 25b174f51225c95b37c2eb77c31e3cad04c97f09d7abfb4896d5f34c04ca8650 | Triage

Submit
Reports

Overview

overview

Static

static

1

6b36005dfe...8.html

windows7-x64

6b36005dfe...8.html

windows10-2004-x64

1

Sharing

General

Target

6b36005dfe154fdf3e1f1bc11c396a7a_JaffaCakes118
Size

151KB
Sample

240523-rllacsdh71
MD5

6b36005dfe154fdf3e1f1bc11c396a7a
SHA1

9030c51f6fbb9049fa90b95d0c92891634614177
SHA256

25b174f51225c95b37c2eb77c31e3cad04c97f09d7abfb4896d5f34c04ca8650
SHA512

9af04f8e1850b0eaa370b72e735a800a36d18b6bd74c3ef67e2f3c86be988e8d9498a8ffd9e99fb87b47bf17a93bde61b8ea9f9d91ac307f3cd5a62cbaa54395
SSDEEP

3072:BnEkvHcZXknJPmyfkMY+BES09JXAnyrZalI+Yqzh:ZjsMYod+X3oI+Yqzh

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

6b36005dfe154fdf3e1f1bc11c396a7a_JaffaCakes118.html

Resource

win7-20240508-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

6b36005dfe154fdf3e1f1bc11c396a7a_JaffaCakes118.html

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  6b36005dfe154fdf3e1f1bc11c396a7a_JaffaCakes118
- Size
  
  151KB
- MD5
  
  6b36005dfe154fdf3e1f1bc11c396a7a
- SHA1
  
  9030c51f6fbb9049fa90b95d0c92891634614177
- SHA256
  
  25b174f51225c95b37c2eb77c31e3cad04c97f09d7abfb4896d5f34c04ca8650
- SHA512
  
  9af04f8e1850b0eaa370b72e735a800a36d18b6bd74c3ef67e2f3c86be988e8d9498a8ffd9e99fb87b47bf17a93bde61b8ea9f9d91ac307f3cd5a62cbaa54395
- SSDEEP
  
  3072:BnEkvHcZXknJPmyfkMY+BES09JXAnyrZalI+Yqzh:ZjsMYod+X3oI+Yqzh
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy