ramnit | b64c5145cc914d164849e79be3babc90ade7535380e16262fdfd5aabc4cd3f66 | Triage

Submit
Reports

Overview

overview

Static

static

1

899daf7e75...8.html

windows7-x64

899daf7e75...8.html

windows10-2004-x64

1

Sharing

General

Target

899daf7e75e18c9d572dbda27fd74357_JaffaCakes118
Size

158KB
Sample

240601-hamjlsde43
MD5

899daf7e75e18c9d572dbda27fd74357
SHA1

13796cbef33c888d63ad649e071c66cc34b273ab
SHA256

b64c5145cc914d164849e79be3babc90ade7535380e16262fdfd5aabc4cd3f66
SHA512

32a8b55ed8f99cd8deb2aff7093e2cf5474fca3a73704ee0f5b47e901c9ad33a96a0ed05e35ae956db60ba8a86929c2ab76a093519eb7dc4a69c4a3a0b989bfb
SSDEEP

3072:ixxpZhDA3yfkMY+BES09JXAnyrZalI+YQ:irpZhDACsMYod+X3oI+YQ

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

899daf7e75e18c9d572dbda27fd74357_JaffaCakes118.html

Resource

win7-20240221-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

899daf7e75e18c9d572dbda27fd74357_JaffaCakes118.html

Resource

win10v2004-20240426-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  899daf7e75e18c9d572dbda27fd74357_JaffaCakes118
- Size
  
  158KB
- MD5
  
  899daf7e75e18c9d572dbda27fd74357
- SHA1
  
  13796cbef33c888d63ad649e071c66cc34b273ab
- SHA256
  
  b64c5145cc914d164849e79be3babc90ade7535380e16262fdfd5aabc4cd3f66
- SHA512
  
  32a8b55ed8f99cd8deb2aff7093e2cf5474fca3a73704ee0f5b47e901c9ad33a96a0ed05e35ae956db60ba8a86929c2ab76a093519eb7dc4a69c4a3a0b989bfb
- SSDEEP
  
  3072:ixxpZhDA3yfkMY+BES09JXAnyrZalI+YQ:irpZhDACsMYod+X3oI+YQ
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy