ramnit | a5dda4343a9c554dfedc734a79229d37288a850ef1217051069572162ed4d7c9 | Triage

Submit
Reports

Overview

overview

Static

static

3

90d44862fd...18.dll

windows7-x64

7

90d44862fd...18.dll

windows10-2004-x64

Sharing

General

Target

90d44862fd7a2e05f2511988ff360d5f_JaffaCakes118
Size

316KB
Sample

241123-1mq2nsyjax
MD5

90d44862fd7a2e05f2511988ff360d5f
SHA1

168ef5a541e3a90233bc896a8910d760e47f82e7
SHA256

a5dda4343a9c554dfedc734a79229d37288a850ef1217051069572162ed4d7c9
SHA512

f20cf7257a152e9f821ee0c2b73f10ac9cc9d4db868f51ac7604296b7cd8df232d521fd8df1614f741e368867d5e8d83b0fcb5b379c884b7f5ae384c21e13ef8
SSDEEP

6144:O5+QAs8Yqz+CLetk43n6JEaWeuk1i9QsjbWN1e6SKT:ZQAs8YJtksn6J3W5k1iPY1bSKT

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

90d44862fd7a2e05f2511988ff360d5f_JaffaCakes118.dll

Resource

win7-20240903-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

90d44862fd7a2e05f2511988ff360d5f_JaffaCakes118.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

16 signatures

150 seconds

Malware Config

Targets

- Target
  
  90d44862fd7a2e05f2511988ff360d5f_JaffaCakes118
- Size
  
  316KB
- MD5
  
  90d44862fd7a2e05f2511988ff360d5f
- SHA1
  
  168ef5a541e3a90233bc896a8910d760e47f82e7
- SHA256
  
  a5dda4343a9c554dfedc734a79229d37288a850ef1217051069572162ed4d7c9
- SHA512
  
  f20cf7257a152e9f821ee0c2b73f10ac9cc9d4db868f51ac7604296b7cd8df232d521fd8df1614f741e368867d5e8d83b0fcb5b379c884b7f5ae384c21e13ef8
- SSDEEP
  
  6144:O5+QAs8Yqz+CLetk43n6JEaWeuk1i9QsjbWN1e6SKT:ZQAs8YJtksn6J3W5k1iPY1bSKT
Score

10^/10

discovery ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2024

Terms | Privacy