ramnit | 50b2ed8b35f796ad10e3ff926d8ef9c7372a1dbf4fb0c918943df2dde35a288b | Triage

Submit
Reports

Overview

overview

Static

static

3

788ce1060f...18.dll

windows7-x64

7

788ce1060f...18.dll

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

788ce1060f91b4a52e9ca9bee34b10cb_JaffaCakes118
Size

576KB
Sample

240727-r82wmavbjl
MD5

788ce1060f91b4a52e9ca9bee34b10cb
SHA1

71f8469738ffb4af970a0a7d11e4a8e3f37f84f4
SHA256

50b2ed8b35f796ad10e3ff926d8ef9c7372a1dbf4fb0c918943df2dde35a288b
SHA512

9674f57316ed577bcb059867d061f02db9e73fb80d8e9e5046e252afa30c26805b75efe4ec01c7079b6438cbd44ca37b96f35b72b208cfae995a0f529f1cbc93
SSDEEP

6144:HZLT3A5Dp0HvFIc5vBlcQGSgS62iiiiiSySYSGS+8c8c8AAANA/AA0fMGrgPhclp:HZL7A5l0711g8onrOcWAqVvzLVzPe

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

788ce1060f91b4a52e9ca9bee34b10cb_JaffaCakes118.dll

Resource

win7-20240704-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

788ce1060f91b4a52e9ca9bee34b10cb_JaffaCakes118.dll

Resource

win10v2004-20240709-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

14 signatures

150 seconds

Malware Config

Targets

- Target
  
  788ce1060f91b4a52e9ca9bee34b10cb_JaffaCakes118
- Size
  
  576KB
- MD5
  
  788ce1060f91b4a52e9ca9bee34b10cb
- SHA1
  
  71f8469738ffb4af970a0a7d11e4a8e3f37f84f4
- SHA256
  
  50b2ed8b35f796ad10e3ff926d8ef9c7372a1dbf4fb0c918943df2dde35a288b
- SHA512
  
  9674f57316ed577bcb059867d061f02db9e73fb80d8e9e5046e252afa30c26805b75efe4ec01c7079b6438cbd44ca37b96f35b72b208cfae995a0f529f1cbc93
- SSDEEP
  
  6144:HZLT3A5Dp0HvFIc5vBlcQGSgS62iiiiiSySYSGS+8c8c8AAANA/AA0fMGrgPhclp:HZL7A5l0711g8onrOcWAqVvzLVzPe
Score

10^/10

discovery ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy