ramnit | a4008583b7072c65f55434268b2283034ac1a4a2761e1525e1f72fbd4b2c307f | Triage

Submit
Reports

Overview

overview

Static

static

1

7858a910e3...8.html

windows7-x64

7858a910e3...8.html

windows10-2004-x64

1

Sharing

General

Target

7858a910e3ee169da8c7cdcb45d3e77a_JaffaCakes118
Size

148KB
Sample

240527-h861xacd2w
MD5

7858a910e3ee169da8c7cdcb45d3e77a
SHA1

ff7b0d52a681892b1b4ef20f56677fee9da19af3
SHA256

a4008583b7072c65f55434268b2283034ac1a4a2761e1525e1f72fbd4b2c307f
SHA512

b4eae3827b714612a85a7d8e343ca8efa70513168e544e9d2e7a4f41e131a7ac309d14ab0182531045e1053bb5fdb2fc2014238b153b3887a9e701ee368aa364
SSDEEP

1536:S9aB1gyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dK:S9aB1gyfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

7858a910e3ee169da8c7cdcb45d3e77a_JaffaCakes118.html

Resource

win7-20240508-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

7858a910e3ee169da8c7cdcb45d3e77a_JaffaCakes118.html

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  7858a910e3ee169da8c7cdcb45d3e77a_JaffaCakes118
- Size
  
  148KB
- MD5
  
  7858a910e3ee169da8c7cdcb45d3e77a
- SHA1
  
  ff7b0d52a681892b1b4ef20f56677fee9da19af3
- SHA256
  
  a4008583b7072c65f55434268b2283034ac1a4a2761e1525e1f72fbd4b2c307f
- SHA512
  
  b4eae3827b714612a85a7d8e343ca8efa70513168e544e9d2e7a4f41e131a7ac309d14ab0182531045e1053bb5fdb2fc2014238b153b3887a9e701ee368aa364
- SSDEEP
  
  1536:S9aB1gyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dK:S9aB1gyfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy