ramnit | 386672975ddaabf2362c20312e7333f204fb9db531724188e39bf9ec4da4120c | Triage

Submit
Reports

Overview

overview

Static

static

1

79c78dde82...8.html

windows7-x64

79c78dde82...8.html

windows10-2004-x64

1

Sharing

General

Target

79c78dde82df18e74b5b3649ccf797de_JaffaCakes118
Size

156KB
Sample

240527-t7q4vabe78
MD5

79c78dde82df18e74b5b3649ccf797de
SHA1

6e8342b0e12aabadb8893d7e513151c6d71dd195
SHA256

386672975ddaabf2362c20312e7333f204fb9db531724188e39bf9ec4da4120c
SHA512

9225c1c6b6a0eb4659067cffa44a30bbe910a925bb24a2e256c3639c4dc6ad96861c272e804eb6f2ddc7e497924198323f5ef35e6a2fbaaf2c1d0b199178b5d6
SSDEEP

3072:iUxF7ZPmP5yfkMY+BES09JXAnyrZalI+YQ:iMZP6csMYod+X3oI+YQ

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

79c78dde82df18e74b5b3649ccf797de_JaffaCakes118.html

Resource

win7-20240221-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

79c78dde82df18e74b5b3649ccf797de_JaffaCakes118.html

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  79c78dde82df18e74b5b3649ccf797de_JaffaCakes118
- Size
  
  156KB
- MD5
  
  79c78dde82df18e74b5b3649ccf797de
- SHA1
  
  6e8342b0e12aabadb8893d7e513151c6d71dd195
- SHA256
  
  386672975ddaabf2362c20312e7333f204fb9db531724188e39bf9ec4da4120c
- SHA512
  
  9225c1c6b6a0eb4659067cffa44a30bbe910a925bb24a2e256c3639c4dc6ad96861c272e804eb6f2ddc7e497924198323f5ef35e6a2fbaaf2c1d0b199178b5d6
- SSDEEP
  
  3072:iUxF7ZPmP5yfkMY+BES09JXAnyrZalI+YQ:iMZP6csMYod+X3oI+YQ
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy