ramnit | 41866edb9cdfd38bf9e540fe9a009c6527b9f0095131f5061e299617c3f9af9c | Triage

Submit
Reports

Overview

overview

Static

static

1

71107cd49d...8.html

windows7-x64

71107cd49d...8.html

windows10-2004-x64

1

Sharing

General

Target

71107cd49dc59f204517b30e0ccc3135_JaffaCakes118
Size

158KB
Sample

240525-gr9vssgf91
MD5

71107cd49dc59f204517b30e0ccc3135
SHA1

3cc3a2dcd6f3a387049faab334b2377deef07e45
SHA256

41866edb9cdfd38bf9e540fe9a009c6527b9f0095131f5061e299617c3f9af9c
SHA512

6864e3532d8fcb597d3c3d2b1220eb7687ad615b09b3f754ecf84d2b38e5c48f6ee4b9a949a0edf2c97bc0e6b228a64a9557b68b09fd31891ae21633cafd4828
SSDEEP

1536:iWRTHM8JV5hJyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:i8fV5hJyfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

71107cd49dc59f204517b30e0ccc3135_JaffaCakes118.html

Resource

win7-20240508-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

71107cd49dc59f204517b30e0ccc3135_JaffaCakes118.html

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  71107cd49dc59f204517b30e0ccc3135_JaffaCakes118
- Size
  
  158KB
- MD5
  
  71107cd49dc59f204517b30e0ccc3135
- SHA1
  
  3cc3a2dcd6f3a387049faab334b2377deef07e45
- SHA256
  
  41866edb9cdfd38bf9e540fe9a009c6527b9f0095131f5061e299617c3f9af9c
- SHA512
  
  6864e3532d8fcb597d3c3d2b1220eb7687ad615b09b3f754ecf84d2b38e5c48f6ee4b9a949a0edf2c97bc0e6b228a64a9557b68b09fd31891ae21633cafd4828
- SSDEEP
  
  1536:iWRTHM8JV5hJyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:i8fV5hJyfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy