ramnit | 9553327137e81ea174f07ba5239f76e44b45a33afb14833900b7fdb1e1bb4f73 | Triage

Submit
Reports

Overview

overview

Static

static

1

93c072fac0...8.html

windows7-x64

93c072fac0...8.html

windows10-2004-x64

3

Sharing

General

Target

93c072fac050d41569299930cd494d6a_JaffaCakes118
Size

157KB
Sample

241124-k7vbtszjbq
MD5

93c072fac050d41569299930cd494d6a
SHA1

7a6fc9ab9bfa896d7a53710b6774eb946d5403e7
SHA256

9553327137e81ea174f07ba5239f76e44b45a33afb14833900b7fdb1e1bb4f73
SHA512

040d6ea065be426eb133add98f020b119f1aa29c0295d2b2b51f2665ff8ef82a6752148d846386decaf46423815fd585fdb34b2b612fcc50dc8b8b9ba7cd0d5f
SSDEEP

1536:ijRTJvQI77TArdjfVR5yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXu:iNReR5yfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

93c072fac050d41569299930cd494d6a_JaffaCakes118.html

Resource

win7-20241023-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

93c072fac050d41569299930cd494d6a_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  93c072fac050d41569299930cd494d6a_JaffaCakes118
- Size
  
  157KB
- MD5
  
  93c072fac050d41569299930cd494d6a
- SHA1
  
  7a6fc9ab9bfa896d7a53710b6774eb946d5403e7
- SHA256
  
  9553327137e81ea174f07ba5239f76e44b45a33afb14833900b7fdb1e1bb4f73
- SHA512
  
  040d6ea065be426eb133add98f020b119f1aa29c0295d2b2b51f2665ff8ef82a6752148d846386decaf46423815fd585fdb34b2b612fcc50dc8b8b9ba7cd0d5f
- SSDEEP
  
  1536:ijRTJvQI77TArdjfVR5yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXu:iNReR5yfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy