ramnit | 14448f62f167d1263db5066002b77888c834efd290531fbfd4585393c8df9cfd | Triage

Submit
Reports

Overview

overview

Static

static

3

052bd30b6c...18.dll

windows7-x64

052bd30b6c...18.dll

windows10-2004-x64

Sharing

General

Target

052bd30b6c6f078571d1d97947ee80c7_JaffaCakes118
Size

679KB
Sample

241001-kz8t9avfqb
MD5

052bd30b6c6f078571d1d97947ee80c7
SHA1

12d09bb3f9a91ddfb24e37504741d32271f7a64b
SHA256

14448f62f167d1263db5066002b77888c834efd290531fbfd4585393c8df9cfd
SHA512

abec82ebe6ce9b20b801cf6f840ed06a8bf5f90fa0c4debeb23702ce77528a5cb4c4c88715103c8e4ed80bf3f4942d904062fdd71dfd6e26d7cf24df87bdbec0
SSDEEP

12288:0NIyZN4+Wv4PLq6Okrh9ZN/hs9DsdtFD2V:09TPmirh9Zdh6sF0

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

052bd30b6c6f078571d1d97947ee80c7_JaffaCakes118.dll

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

052bd30b6c6f078571d1d97947ee80c7_JaffaCakes118.dll

Resource

win10v2004-20240802-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  052bd30b6c6f078571d1d97947ee80c7_JaffaCakes118
- Size
  
  679KB
- MD5
  
  052bd30b6c6f078571d1d97947ee80c7
- SHA1
  
  12d09bb3f9a91ddfb24e37504741d32271f7a64b
- SHA256
  
  14448f62f167d1263db5066002b77888c834efd290531fbfd4585393c8df9cfd
- SHA512
  
  abec82ebe6ce9b20b801cf6f840ed06a8bf5f90fa0c4debeb23702ce77528a5cb4c4c88715103c8e4ed80bf3f4942d904062fdd71dfd6e26d7cf24df87bdbec0
- SSDEEP
  
  12288:0NIyZN4+Wv4PLq6Okrh9ZN/hs9DsdtFD2V:09TPmirh9Zdh6sF0
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2024

Terms | Privacy