ramnit | 857f205ae8f55eb26f412e843b642c4087e72081a29c26825bff90f17032b568 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

1

a9ca05ba97...8.html

windows7-x64

a9ca05ba97...8.html

windows10-2004-x64

1

Sharing

General

Target

a9ca05ba974b761347097101a1329a28_JaffaCakes118
Size

157KB
Sample

240614-p6yebavfqm
MD5

a9ca05ba974b761347097101a1329a28
SHA1

29c4581811f23c1f884fd8cd9d9f4286862034b8
SHA256

857f205ae8f55eb26f412e843b642c4087e72081a29c26825bff90f17032b568
SHA512

3eb50d16b88cb7e695388098088acc65c52de835ea108e46da0e4b97c28d95bae47319e1f299847592dafee51e434c326c53390e5ccd5ae61623e470b433be2b
SSDEEP

1536:i5RTCuREZFzD3HbKyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:ifALKyfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

a9ca05ba974b761347097101a1329a28_JaffaCakes118.html

Resource

win7-20231129-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

a9ca05ba974b761347097101a1329a28_JaffaCakes118.html

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  
  a9ca05ba974b761347097101a1329a28_JaffaCakes118
- Size
  
  157KB
- MD5
  
  a9ca05ba974b761347097101a1329a28
- SHA1
  
  29c4581811f23c1f884fd8cd9d9f4286862034b8
- SHA256
  
  857f205ae8f55eb26f412e843b642c4087e72081a29c26825bff90f17032b568
- SHA512
  
  3eb50d16b88cb7e695388098088acc65c52de835ea108e46da0e4b97c28d95bae47319e1f299847592dafee51e434c326c53390e5ccd5ae61623e470b433be2b
- SSDEEP
  
  1536:i5RTCuREZFzD3HbKyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:ifALKyfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2025

Terms | Privacy