ramnit | 1071859f70cc40cd031329415ae1ad01f2002e5c41d457f91d01cb0affcf2a50 | Triage

Submit
Reports

Overview

overview

Static

static

3

024625cb29...18.dll

windows7-x64

7

024625cb29...18.dll

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

024625cb29a8f0ae5e03e206ae45583b_JaffaCakes118
Size

256KB
Sample

240930-tw86aayera
MD5

024625cb29a8f0ae5e03e206ae45583b
SHA1

e8d68f6301fe932dd9e6536b9c263a11e088a276
SHA256

1071859f70cc40cd031329415ae1ad01f2002e5c41d457f91d01cb0affcf2a50
SHA512

758c40550cee80cf057cc09f781c3e9312e75fae21cd279cc9215fede7c03c15ad7d65af0561b1641d6f61011cc8ba10ec63669fe281038f2191659dc14b5b97
SSDEEP

3072:QaK19LeHZSuHa1JdgNp3tl7yrzzifozMioc6bnhUJDQntoY4i08vhsTDuq:cZk0uHae9CXwS9oc6TqOWXwvkDuq

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

024625cb29a8f0ae5e03e206ae45583b_JaffaCakes118.dll

Resource

win7-20240729-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

024625cb29a8f0ae5e03e206ae45583b_JaffaCakes118.dll

Resource

win10v2004-20240802-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

14 signatures

150 seconds

Malware Config

Targets

- Target
  
  024625cb29a8f0ae5e03e206ae45583b_JaffaCakes118
- Size
  
  256KB
- MD5
  
  024625cb29a8f0ae5e03e206ae45583b
- SHA1
  
  e8d68f6301fe932dd9e6536b9c263a11e088a276
- SHA256
  
  1071859f70cc40cd031329415ae1ad01f2002e5c41d457f91d01cb0affcf2a50
- SHA512
  
  758c40550cee80cf057cc09f781c3e9312e75fae21cd279cc9215fede7c03c15ad7d65af0561b1641d6f61011cc8ba10ec63669fe281038f2191659dc14b5b97
- SSDEEP
  
  3072:QaK19LeHZSuHa1JdgNp3tl7yrzzifozMioc6bnhUJDQntoY4i08vhsTDuq:cZk0uHae9CXwS9oc6TqOWXwvkDuq
Score

10^/10

discovery ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy