ramnit | e84f9e25e1083576c6f317f37f2e3a7192851392f64c8571a1b5c25d1c185d92 | Triage

Submit
Reports

Overview

overview

Static

static

1

79cf628e23...8.html

windows7-x64

79cf628e23...8.html

windows10-2004-x64

1

Sharing

General

Target

79cf628e23a98bbce60c2e93db33286e_JaffaCakes118
Size

122KB
Sample

240527-vdrzqabg77
MD5

79cf628e23a98bbce60c2e93db33286e
SHA1

fc2a337a36a5407f0f815d17088614c541455c49
SHA256

e84f9e25e1083576c6f317f37f2e3a7192851392f64c8571a1b5c25d1c185d92
SHA512

46791b73b6d6d5b3f604abbc8f21c4b711f81dc8e2aaa41f96018ea2f271d9ddb8b7c09ad189b3ac76db5cc776d7940cc85d9224e2dc97add992ba0580637776
SSDEEP

1536:S+ox+yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGL:Spx+yfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

79cf628e23a98bbce60c2e93db33286e_JaffaCakes118.html

Resource

win7-20240221-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

79cf628e23a98bbce60c2e93db33286e_JaffaCakes118.html

Resource

win10v2004-20240426-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  79cf628e23a98bbce60c2e93db33286e_JaffaCakes118
- Size
  
  122KB
- MD5
  
  79cf628e23a98bbce60c2e93db33286e
- SHA1
  
  fc2a337a36a5407f0f815d17088614c541455c49
- SHA256
  
  e84f9e25e1083576c6f317f37f2e3a7192851392f64c8571a1b5c25d1c185d92
- SHA512
  
  46791b73b6d6d5b3f604abbc8f21c4b711f81dc8e2aaa41f96018ea2f271d9ddb8b7c09ad189b3ac76db5cc776d7940cc85d9224e2dc97add992ba0580637776
- SSDEEP
  
  1536:S+ox+yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGL:Spx+yfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy