ramnit | 23485932d015700264a682075e6d1e96fdd3ac8d6f40b2450505c121f2c117d8 | Triage

Submit
Reports

Overview

overview

Static

static

1

8298f195aa...8.html

windows7-x64

8298f195aa...8.html

windows10-2004-x64

1

Sharing

General

Target

8298f195aa77b082033ecd5bf0128fa4_JaffaCakes118
Size

125KB
Sample

240530-bg4cdagg7w
MD5

8298f195aa77b082033ecd5bf0128fa4
SHA1

3b83d883605795fe4b76e03d7f16567e47408d10
SHA256

23485932d015700264a682075e6d1e96fdd3ac8d6f40b2450505c121f2c117d8
SHA512

f147bdefdb04407f8c0f8cf7c15d8d5017c93413ee0c9fecad1263ea959d74c3554fcbc83539984852b50bb15523d11091ec4b3089fda38e9262dd74112b75cf
SSDEEP

1536:SdCH7B4lVEyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTs:S2yfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

8298f195aa77b082033ecd5bf0128fa4_JaffaCakes118.html

Resource

win7-20240508-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

8298f195aa77b082033ecd5bf0128fa4_JaffaCakes118.html

Resource

win10v2004-20240426-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  8298f195aa77b082033ecd5bf0128fa4_JaffaCakes118
- Size
  
  125KB
- MD5
  
  8298f195aa77b082033ecd5bf0128fa4
- SHA1
  
  3b83d883605795fe4b76e03d7f16567e47408d10
- SHA256
  
  23485932d015700264a682075e6d1e96fdd3ac8d6f40b2450505c121f2c117d8
- SHA512
  
  f147bdefdb04407f8c0f8cf7c15d8d5017c93413ee0c9fecad1263ea959d74c3554fcbc83539984852b50bb15523d11091ec4b3089fda38e9262dd74112b75cf
- SSDEEP
  
  1536:SdCH7B4lVEyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTs:S2yfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy