ramnit | de00b3740ab3d3820225c01b410ef52607ae81c19b4ab9dfb8408b6823ce1f80 | Triage

Submit
Reports

Overview

overview

Static

static

3

2a51f24dfb...18.dll

windows7-x64

2a51f24dfb...18.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target

2a51f24dfb392c231ac10e81841cd88e_JaffaCakes118
Size

260KB
Sample

240708-anaszawang
MD5

2a51f24dfb392c231ac10e81841cd88e
SHA1

4651ee8e43f80b92b38eb2535ae54be0458334f0
SHA256

de00b3740ab3d3820225c01b410ef52607ae81c19b4ab9dfb8408b6823ce1f80
SHA512

08158754cfe2d257808f40b6c4a42c4df24eb3f4453d5bc5b860012bc8cbc67817c9580322bc981720e8edc550502293e003e49fb66ea911c387f41e628cffd0
SSDEEP

3072:HibTTp78CcCBPAG4vQFsqI07yMpo/GnYCrJ1kNfC/eb0oqG:oT14KPYvVMpAsWfC2b0oqG

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2a51f24dfb392c231ac10e81841cd88e_JaffaCakes118.dll

Resource

win7-20240704-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

2a51f24dfb392c231ac10e81841cd88e_JaffaCakes118.dll

Resource

win10v2004-20240704-en

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  2a51f24dfb392c231ac10e81841cd88e_JaffaCakes118
- Size
  
  260KB
- MD5
  
  2a51f24dfb392c231ac10e81841cd88e
- SHA1
  
  4651ee8e43f80b92b38eb2535ae54be0458334f0
- SHA256
  
  de00b3740ab3d3820225c01b410ef52607ae81c19b4ab9dfb8408b6823ce1f80
- SHA512
  
  08158754cfe2d257808f40b6c4a42c4df24eb3f4453d5bc5b860012bc8cbc67817c9580322bc981720e8edc550502293e003e49fb66ea911c387f41e628cffd0
- SSDEEP
  
  3072:HibTTp78CcCBPAG4vQFsqI07yMpo/GnYCrJ1kNfC/eb0oqG:oT14KPYvVMpAsWfC2b0oqG
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2025

Terms | Privacy