ramnit | 0df07849041db7ec6da536f32e56147a3cfd3d75a5bef715b03752aa8e248ef5 | Triage

Submit
Reports

Overview

overview

Static

static

3

91addb43ef...18.dll

windows7-x64

3

91addb43ef...18.dll

windows10-2004-x64

Sharing

General

Target

91addb43efb1576a2d3b3c05283076b0_JaffaCakes118
Size

265KB
Sample

241124-bctmdasjfn
MD5

91addb43efb1576a2d3b3c05283076b0
SHA1

7ae0d5d419778b3c7d1391f61e25b39ab60dfb1a
SHA256

0df07849041db7ec6da536f32e56147a3cfd3d75a5bef715b03752aa8e248ef5
SHA512

9828b1ccc61c226a04c26607f0c97ac634e6b6b1b38a92d502c8e13bbe7fb6a4115e00990966c28e9ff02d4aa940ec36e37d4f21dd327daa11150f0bafe358d9
SSDEEP

6144:mB9OCh1IOOcPWSMOjLEmZamm8eiG9loCR1:mB9O7jwWSjZnpy9loCR1

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

91addb43efb1576a2d3b3c05283076b0_JaffaCakes118.dll

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

91addb43efb1576a2d3b3c05283076b0_JaffaCakes118.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

15 signatures

150 seconds

Malware Config

Targets

- Target
  
  91addb43efb1576a2d3b3c05283076b0_JaffaCakes118
- Size
  
  265KB
- MD5
  
  91addb43efb1576a2d3b3c05283076b0
- SHA1
  
  7ae0d5d419778b3c7d1391f61e25b39ab60dfb1a
- SHA256
  
  0df07849041db7ec6da536f32e56147a3cfd3d75a5bef715b03752aa8e248ef5
- SHA512
  
  9828b1ccc61c226a04c26607f0c97ac634e6b6b1b38a92d502c8e13bbe7fb6a4115e00990966c28e9ff02d4aa940ec36e37d4f21dd327daa11150f0bafe358d9
- SSDEEP
  
  6144:mB9OCh1IOOcPWSMOjLEmZamm8eiG9loCR1:mB9O7jwWSjZnpy9loCR1
Score

10^/10

discovery ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2024

Terms | Privacy