ramnit | 1aa30b081a62d21d7ef7a9cab3e88290bf01e0868487e215b258b08192293411 | Triage

Submit
Reports

Overview

overview

Static

static

1

7b2b5ed17b...8.html

windows7-x64

7b2b5ed17b...8.html

windows10-2004-x64

1

Sharing

General

Target

7b2b5ed17b55a8f63f8d52ff30c82649_JaffaCakes118
Size

348KB
Sample

240528-bc7h8shg88
MD5

7b2b5ed17b55a8f63f8d52ff30c82649
SHA1

738919554a86f3cb01f4cb2a4a5ee22bd68793f4
SHA256

1aa30b081a62d21d7ef7a9cab3e88290bf01e0868487e215b258b08192293411
SHA512

9cb4ae4171e1871d32ad0ea3fce0d50f6dd1823a4ec59fcedb88e12a7fc550a50debb6fb398a3821ad329d18450b9cd11e0efb7abf8a9eaf9aa6bd965820f9d8
SSDEEP

6144:JsMYod+X3oI+YNHsMYod+X3oI+Y5sMYod+X3oI+YQ:V5d+X3b5d+X3f5d+X3+

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

7b2b5ed17b55a8f63f8d52ff30c82649_JaffaCakes118.html

Resource

win7-20240508-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

7b2b5ed17b55a8f63f8d52ff30c82649_JaffaCakes118.html

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  
  7b2b5ed17b55a8f63f8d52ff30c82649_JaffaCakes118
- Size
  
  348KB
- MD5
  
  7b2b5ed17b55a8f63f8d52ff30c82649
- SHA1
  
  738919554a86f3cb01f4cb2a4a5ee22bd68793f4
- SHA256
  
  1aa30b081a62d21d7ef7a9cab3e88290bf01e0868487e215b258b08192293411
- SHA512
  
  9cb4ae4171e1871d32ad0ea3fce0d50f6dd1823a4ec59fcedb88e12a7fc550a50debb6fb398a3821ad329d18450b9cd11e0efb7abf8a9eaf9aa6bd965820f9d8
- SSDEEP
  
  6144:JsMYod+X3oI+YNHsMYod+X3oI+Y5sMYod+X3oI+YQ:V5d+X3b5d+X3f5d+X3+
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy