ramnit | 9eb67e9980a2c61a0186a8e588ea7d705700a243fd66ee9659e509de2379dd4c | Triage

Submit
Reports

Overview

overview

Static

static

1

7f9d49f9fd...8.html

windows7-x64

7f9d49f9fd...8.html

windows10-2004-x64

1

Sharing

General

Target

7f9d49f9fd34a26243c43fea3678f112_JaffaCakes118
Size

156KB
Sample

240529-gcp7vada76
MD5

7f9d49f9fd34a26243c43fea3678f112
SHA1

bb4273e5bb1461ad3ef6ca1d03bb1096e52349e7
SHA256

9eb67e9980a2c61a0186a8e588ea7d705700a243fd66ee9659e509de2379dd4c
SHA512

3344c88ef19ec9da75796ae5007d290c1895652bc60756bc3af5ae403bf99f976a52cb57d01b3dcc09d307b80a8fcb393f69ae86d3adfd63dd35fb376a3db5a9
SSDEEP

1536:iyRTISwvWAz94gyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:iAUfOgyfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

7f9d49f9fd34a26243c43fea3678f112_JaffaCakes118.html

Resource

win7-20240220-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

7f9d49f9fd34a26243c43fea3678f112_JaffaCakes118.html

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  7f9d49f9fd34a26243c43fea3678f112_JaffaCakes118
- Size
  
  156KB
- MD5
  
  7f9d49f9fd34a26243c43fea3678f112
- SHA1
  
  bb4273e5bb1461ad3ef6ca1d03bb1096e52349e7
- SHA256
  
  9eb67e9980a2c61a0186a8e588ea7d705700a243fd66ee9659e509de2379dd4c
- SHA512
  
  3344c88ef19ec9da75796ae5007d290c1895652bc60756bc3af5ae403bf99f976a52cb57d01b3dcc09d307b80a8fcb393f69ae86d3adfd63dd35fb376a3db5a9
- SSDEEP
  
  1536:iyRTISwvWAz94gyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:iAUfOgyfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy