ramnit | 80cac0e58f514cb36b121d2b96c5dd3ef805d26f44f9a05d0fe3fe9e84fe4bb8 | Triage

Submit
Reports

Overview

overview

Static

static

1

8473264651...8.html

windows7-x64

8473264651...8.html

windows10-2004-x64

3

Sharing

General

Target

8473264651452c1bb7e26df989c493d7_JaffaCakes118
Size

156KB
Sample

241101-qlfjfa1fmj
MD5

8473264651452c1bb7e26df989c493d7
SHA1

0d28333d8fe2d3da75bf57ca1938dbfe49143c18
SHA256

80cac0e58f514cb36b121d2b96c5dd3ef805d26f44f9a05d0fe3fe9e84fe4bb8
SHA512

9b3d87791868d71418941e4057f7c01bb60eaf7a6f6f03b7fb6ff150d815afe0d21e4cc87e504b3a06436ca73dc2036280dab75afad960c681b0f2b67ec2e46d
SSDEEP

1536:ifRTB01Z7JMm8MyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:ixAJ3DyfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

8473264651452c1bb7e26df989c493d7_JaffaCakes118.html

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

8473264651452c1bb7e26df989c493d7_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  8473264651452c1bb7e26df989c493d7_JaffaCakes118
- Size
  
  156KB
- MD5
  
  8473264651452c1bb7e26df989c493d7
- SHA1
  
  0d28333d8fe2d3da75bf57ca1938dbfe49143c18
- SHA256
  
  80cac0e58f514cb36b121d2b96c5dd3ef805d26f44f9a05d0fe3fe9e84fe4bb8
- SHA512
  
  9b3d87791868d71418941e4057f7c01bb60eaf7a6f6f03b7fb6ff150d815afe0d21e4cc87e504b3a06436ca73dc2036280dab75afad960c681b0f2b67ec2e46d
- SSDEEP
  
  1536:ifRTB01Z7JMm8MyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:ixAJ3DyfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy