ramnit | 218bc3caebef80f6db6dcfa124bcacfa426c3afa4ee0182c27c68a8cd22c1ee4 | Triage

Submit
Reports

Overview

overview

Static

static

1

85ec03eba0...8.html

windows7-x64

85ec03eba0...8.html

windows10-2004-x64

1

Sharing

General

Target

85ec03eba068a57e7a3ce7ab301a8e25_JaffaCakes118
Size

118KB
Sample

240531-ekp6psfd93
MD5

85ec03eba068a57e7a3ce7ab301a8e25
SHA1

dff7bfa5d6d2e4f0058da7fd0604fc9ceb0c9e1a
SHA256

218bc3caebef80f6db6dcfa124bcacfa426c3afa4ee0182c27c68a8cd22c1ee4
SHA512

415c5ab48122a749f401263d3d5138b81d97c4beac7b522858e43a4ab65c76caf869d8ffcb4afac28900f439c0ea839561485e9f8accf7d8b1b77024073b9b38
SSDEEP

1536:SlnK5yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGL:SCyfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

85ec03eba068a57e7a3ce7ab301a8e25_JaffaCakes118.html

Resource

win7-20240221-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

85ec03eba068a57e7a3ce7ab301a8e25_JaffaCakes118.html

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  85ec03eba068a57e7a3ce7ab301a8e25_JaffaCakes118
- Size
  
  118KB
- MD5
  
  85ec03eba068a57e7a3ce7ab301a8e25
- SHA1
  
  dff7bfa5d6d2e4f0058da7fd0604fc9ceb0c9e1a
- SHA256
  
  218bc3caebef80f6db6dcfa124bcacfa426c3afa4ee0182c27c68a8cd22c1ee4
- SHA512
  
  415c5ab48122a749f401263d3d5138b81d97c4beac7b522858e43a4ab65c76caf869d8ffcb4afac28900f439c0ea839561485e9f8accf7d8b1b77024073b9b38
- SSDEEP
  
  1536:SlnK5yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGL:SCyfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy