ramnit

Resubmissions

11/08/2024, 16:20

240811-ttk1nsxbpr 10

11/08/2024, 16:17

240811-trtj2axbjk 10

Sharing

Copy URL Twitter E-mail

General

Target

8b10092b3215b4a72242120bd34247be_JaffaCakes118
Size

168KB
Sample

240811-trtj2axbjk
MD5

8b10092b3215b4a72242120bd34247be
SHA1

0c1a05675c49ce3f65e3c8a44125f57f4ba87347
SHA256

26616b37b6d93af0393b5edbdaee811d0e7a0a0c87c2f40446198116f57fee8f
SHA512

0af84da7f789c98a90a5cc0236ab8838047fe785dbc56a3b5a4d3032e6ec462579ec8ccdb09af9d35e7a1f281d61e5cb02afe3b7e653fbac2400ea8bded730a8
SSDEEP

3072:C61Ye3TaEu2CoCcn3zO7A4D8X0kaOa0SB9lI6NQ3TaI49gCxW24UydiXsvMp:PTa12CoCckAe87nSB3ZOaI4SCxW0DN

Score

10^/10

Malware Config

Targets

- Target
  
  8b10092b3215b4a72242120bd34247be_JaffaCakes118
- Size
  
  168KB
- MD5
  
  8b10092b3215b4a72242120bd34247be
- SHA1
  
  0c1a05675c49ce3f65e3c8a44125f57f4ba87347
- SHA256
  
  26616b37b6d93af0393b5edbdaee811d0e7a0a0c87c2f40446198116f57fee8f
- SHA512
  
  0af84da7f789c98a90a5cc0236ab8838047fe785dbc56a3b5a4d3032e6ec462579ec8ccdb09af9d35e7a1f281d61e5cb02afe3b7e653fbac2400ea8bded730a8
- SSDEEP
  
  3072:C61Ye3TaEu2CoCcn3zO7A4D8X0kaOa0SB9lI6NQ3TaI49gCxW24UydiXsvMp:PTa12CoCckAe87nSB3ZOaI4SCxW0DN
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

UPX packed file

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2