ramnit | d06f2b13a72d14b0d828bc6c70e283303ca23e2b653b0097cdd2378db6367fe1 | Triage

Submit
Reports

Overview

overview

Static

static

1

811954098a...8.html

windows7-x64

811954098a...8.html

windows10-2004-x64

1

Sharing

General

Target

811954098a989d36c2b8e44e155f1fa1_JaffaCakes118
Size

158KB
Sample

240529-r3m6aaad57
MD5

811954098a989d36c2b8e44e155f1fa1
SHA1

6904a0beddd27a1acadac483b50f32629d16face
SHA256

d06f2b13a72d14b0d828bc6c70e283303ca23e2b653b0097cdd2378db6367fe1
SHA512

c82dd11a438679e799eb52019013c35bac7f96a77029963496f51b8afa9496fd5905d89cf9f8681ab362ab749e82d52cd56768a508914e65f28864c2fdcbc368
SSDEEP

1536:ieRTsp2Fb/rMfN8yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJA:iUtMfN8yfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

811954098a989d36c2b8e44e155f1fa1_JaffaCakes118.html

Resource

win7-20240221-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

811954098a989d36c2b8e44e155f1fa1_JaffaCakes118.html

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  811954098a989d36c2b8e44e155f1fa1_JaffaCakes118
- Size
  
  158KB
- MD5
  
  811954098a989d36c2b8e44e155f1fa1
- SHA1
  
  6904a0beddd27a1acadac483b50f32629d16face
- SHA256
  
  d06f2b13a72d14b0d828bc6c70e283303ca23e2b653b0097cdd2378db6367fe1
- SHA512
  
  c82dd11a438679e799eb52019013c35bac7f96a77029963496f51b8afa9496fd5905d89cf9f8681ab362ab749e82d52cd56768a508914e65f28864c2fdcbc368
- SSDEEP
  
  1536:ieRTsp2Fb/rMfN8yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJA:iUtMfN8yfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy