ramnit | 25d59c9aec063a9e1a463bb073ad3bf975bdc41bb70acf3e40292a03c06db3bc | Triage

Submit
Reports

Overview

overview

Static

static

1

95d6819ee9...8.html

windows7-x64

95d6819ee9...8.html

windows10-2004-x64

3

Sharing

General

Target

95d6819ee945104bd9b5b974191b1edc_JaffaCakes118
Size

157KB
Sample

241124-tttb2stqaj
MD5

95d6819ee945104bd9b5b974191b1edc
SHA1

7e879745175b83c5735f63f51cb61fb3999e4541
SHA256

25d59c9aec063a9e1a463bb073ad3bf975bdc41bb70acf3e40292a03c06db3bc
SHA512

0c5fd4cb9d52d97c3599337a036704576320346fe279d4b2b1dc1bb2bb2e2cdfec93ff8f50140e40bd9b8eef7348dd3276ba83498ecbdf02da16f32abcb5211d
SSDEEP

1536:iVRTWvNvFWu9+yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:iDqwu9+yfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

95d6819ee945104bd9b5b974191b1edc_JaffaCakes118.html

Resource

win7-20241023-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

95d6819ee945104bd9b5b974191b1edc_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  95d6819ee945104bd9b5b974191b1edc_JaffaCakes118
- Size
  
  157KB
- MD5
  
  95d6819ee945104bd9b5b974191b1edc
- SHA1
  
  7e879745175b83c5735f63f51cb61fb3999e4541
- SHA256
  
  25d59c9aec063a9e1a463bb073ad3bf975bdc41bb70acf3e40292a03c06db3bc
- SHA512
  
  0c5fd4cb9d52d97c3599337a036704576320346fe279d4b2b1dc1bb2bb2e2cdfec93ff8f50140e40bd9b8eef7348dd3276ba83498ecbdf02da16f32abcb5211d
- SSDEEP
  
  1536:iVRTWvNvFWu9+yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:iDqwu9+yfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2025

Terms | Privacy