ramnit | 5d05bd6ee876e3b7317a27d48b88a49adcd31fa62d78236828d924e075c760a7 | Triage

Submit
Reports

Overview

overview

Static

static

1

6d4378ea04...8.html

windows7-x64

6d4378ea04...8.html

windows10-2004-x64

1

Sharing

General

Target

6d4378ea0420b0a5d0b799ff87a018d8_JaffaCakes118
Size

159KB
Sample

240524-egvl1scb7s
MD5

6d4378ea0420b0a5d0b799ff87a018d8
SHA1

536c402a2cb4b5a359af16c17ec130ea960ff58d
SHA256

5d05bd6ee876e3b7317a27d48b88a49adcd31fa62d78236828d924e075c760a7
SHA512

31874056fdea09c57ce9eae451e45008d739e3dc5326802e291bbb82ad28eb658314d3b405c8c84fee7b216c1175016d6ad9ceccf1f2f5805e8f01f626f035c5
SSDEEP

3072:i3HD4Jxw2Y0hyfkMY+BES09JXAnyrZalI+YQ:i3DqY0ksMYod+X3oI+YQ

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

6d4378ea0420b0a5d0b799ff87a018d8_JaffaCakes118.html

Resource

win7-20231129-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

6d4378ea0420b0a5d0b799ff87a018d8_JaffaCakes118.html

Resource

win10v2004-20240426-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  6d4378ea0420b0a5d0b799ff87a018d8_JaffaCakes118
- Size
  
  159KB
- MD5
  
  6d4378ea0420b0a5d0b799ff87a018d8
- SHA1
  
  536c402a2cb4b5a359af16c17ec130ea960ff58d
- SHA256
  
  5d05bd6ee876e3b7317a27d48b88a49adcd31fa62d78236828d924e075c760a7
- SHA512
  
  31874056fdea09c57ce9eae451e45008d739e3dc5326802e291bbb82ad28eb658314d3b405c8c84fee7b216c1175016d6ad9ceccf1f2f5805e8f01f626f035c5
- SSDEEP
  
  3072:i3HD4Jxw2Y0hyfkMY+BES09JXAnyrZalI+YQ:i3DqY0ksMYod+X3oI+YQ
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy