ramnit | 4876273d87ff59b5ca6c9d7a14cd77c6e86e07c2f2e61219d295395fa43b9edd | Triage

Submit
Reports

Overview

overview

Static

static

1

b4f0c48b85...8.html

windows7-x64

b4f0c48b85...8.html

windows10-2004-x64

3

Sharing

General

Target

b4f0c48b85a2a47781d14284333f6cdd_JaffaCakes118
Size

156KB
Sample

241130-fw8mvstqgw
MD5

b4f0c48b85a2a47781d14284333f6cdd
SHA1

6b3ae5cef090000635e97c375ac8e8473cd1a9ad
SHA256

4876273d87ff59b5ca6c9d7a14cd77c6e86e07c2f2e61219d295395fa43b9edd
SHA512

c6cacd669a118ac3c00533f3bfb706bfb90209372184632dd52c69c43b8007d1910f1615f6cadb086d141dba7fbfb28cc02fdc32cf5aec34a82b186f930d404e
SSDEEP

1536:ifRTBtz2Wp8mr6yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:ixp6yfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

b4f0c48b85a2a47781d14284333f6cdd_JaffaCakes118.html

Resource

win7-20240708-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

b4f0c48b85a2a47781d14284333f6cdd_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  b4f0c48b85a2a47781d14284333f6cdd_JaffaCakes118
- Size
  
  156KB
- MD5
  
  b4f0c48b85a2a47781d14284333f6cdd
- SHA1
  
  6b3ae5cef090000635e97c375ac8e8473cd1a9ad
- SHA256
  
  4876273d87ff59b5ca6c9d7a14cd77c6e86e07c2f2e61219d295395fa43b9edd
- SHA512
  
  c6cacd669a118ac3c00533f3bfb706bfb90209372184632dd52c69c43b8007d1910f1615f6cadb086d141dba7fbfb28cc02fdc32cf5aec34a82b186f930d404e
- SSDEEP
  
  1536:ifRTBtz2Wp8mr6yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:ixp6yfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2025

Terms | Privacy