ramnit | b37a50f55c37f32734514395269cb976551fd7251de6b8e70df0a532a0f717a8 | Triage

Submit
Reports

Overview

overview

Static

static

1

7f5e8070a1...8.html

windows7-x64

7f5e8070a1...8.html

windows10-2004-x64

1

Sharing

General

Target

7f5e8070a18df645777ede93680f3d07_JaffaCakes118
Size

352KB
Sample

240529-d5ltcahh57
MD5

7f5e8070a18df645777ede93680f3d07
SHA1

66a8e91f3537533aa9727209cb599128a53454dd
SHA256

b37a50f55c37f32734514395269cb976551fd7251de6b8e70df0a532a0f717a8
SHA512

07242a69ee622190dc597512d9b527ce1a763fad65c8d62af962e0081c00ace040bb6e06fbeb818e826699f1ca474722e8d1b66ee8aa8acf4ee4832489d2d83e
SSDEEP

6144:SjbxMvIlh+2FM0Sex+JyZsMYod+X3oI+YRGDe1sMYod+X3oI+YRGDev:ebxMvIlh+2FM0Sex+Jyl5d+X3vGDG5d2

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

7f5e8070a18df645777ede93680f3d07_JaffaCakes118.html

Resource

win7-20240419-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

7f5e8070a18df645777ede93680f3d07_JaffaCakes118.html

Resource

win10v2004-20240426-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  7f5e8070a18df645777ede93680f3d07_JaffaCakes118
- Size
  
  352KB
- MD5
  
  7f5e8070a18df645777ede93680f3d07
- SHA1
  
  66a8e91f3537533aa9727209cb599128a53454dd
- SHA256
  
  b37a50f55c37f32734514395269cb976551fd7251de6b8e70df0a532a0f717a8
- SHA512
  
  07242a69ee622190dc597512d9b527ce1a763fad65c8d62af962e0081c00ace040bb6e06fbeb818e826699f1ca474722e8d1b66ee8aa8acf4ee4832489d2d83e
- SSDEEP
  
  6144:SjbxMvIlh+2FM0Sex+JyZsMYod+X3oI+YRGDe1sMYod+X3oI+YRGDev:ebxMvIlh+2FM0Sex+Jyl5d+X3vGDG5d2
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy