ramnit | 620a0568ca909559cb343512f262632a156230611b7976d445c7d39c82cd8462 | Triage

Submit
Reports

Overview

overview

Static

static

1

2423ac1e27...8.html

windows7-x64

2423ac1e27...8.html

windows10-2004-x64

1

Sharing

General

Target

2423ac1e27cfe4f6752ff78489229d89_JaffaCakes118
Size

235KB
Sample

240704-bp32kswgqq
MD5

2423ac1e27cfe4f6752ff78489229d89
SHA1

460b12aea408fcd84522d70d8fa6c11523463462
SHA256

620a0568ca909559cb343512f262632a156230611b7976d445c7d39c82cd8462
SHA512

9d88f8c7cb35e3bd3aaa20fa063a4fcb9478d240ade8c3e8367b4b1fae25432b1465d04f21ec5eaf3b3aa966ef185c87a5181849957cc66a01d2fe198f1fc289
SSDEEP

3072:SDKYyfkMY+BES09JXAnyrZalI+Ys4FS4apl4RdambS798:SDKVsMYod+X3oI+YsR4aplSvS7u

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

2423ac1e27cfe4f6752ff78489229d89_JaffaCakes118.html

Resource

win7-20240611-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

2423ac1e27cfe4f6752ff78489229d89_JaffaCakes118.html

Resource

win10v2004-20240611-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  2423ac1e27cfe4f6752ff78489229d89_JaffaCakes118
- Size
  
  235KB
- MD5
  
  2423ac1e27cfe4f6752ff78489229d89
- SHA1
  
  460b12aea408fcd84522d70d8fa6c11523463462
- SHA256
  
  620a0568ca909559cb343512f262632a156230611b7976d445c7d39c82cd8462
- SHA512
  
  9d88f8c7cb35e3bd3aaa20fa063a4fcb9478d240ade8c3e8367b4b1fae25432b1465d04f21ec5eaf3b3aa966ef185c87a5181849957cc66a01d2fe198f1fc289
- SSDEEP
  
  3072:SDKYyfkMY+BES09JXAnyrZalI+Ys4FS4apl4RdambS798:SDKVsMYod+X3oI+YsR4aplSvS7u
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy