ramnit | e432748809631765cd0884b57fc87e8135856957d82e3299b4c1dfe18475c5e2 | Triage

Submit
Reports

Overview

overview

Static

static

3

d8d84dae63...18.exe

windows7-x64

d8d84dae63...18.exe

windows10-2004-x64

Sharing

General

Target

d8d84dae63e5b48660ca61ce624e1bb2_JaffaCakes118
Size

120KB
Sample

241209-kyrjksxnbr
MD5

d8d84dae63e5b48660ca61ce624e1bb2
SHA1

4ff48f0add9e2078761821f805c8ec96841d0a3f
SHA256

e432748809631765cd0884b57fc87e8135856957d82e3299b4c1dfe18475c5e2
SHA512

8bea7a7517ae06b2a9073f0e275307d5e6423b04292ed4cc3ba05a3b76c8c8ac3260c7b7d761c8773cc93fad2316157300b6526588039bf204335458d74c4e76
SSDEEP

1536:QQkVjEGbpBSrvnPeYJo9Vu3sQwsanTdgW/OQ/s1x3UM0+efcpsm:xkVDpBSqao9c3HwsanTdgyOxsP+f+

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

d8d84dae63e5b48660ca61ce624e1bb2_JaffaCakes118.exe

Resource

win7-20240708-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

d8d84dae63e5b48660ca61ce624e1bb2_JaffaCakes118.exe

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  d8d84dae63e5b48660ca61ce624e1bb2_JaffaCakes118
- Size
  
  120KB
- MD5
  
  d8d84dae63e5b48660ca61ce624e1bb2
- SHA1
  
  4ff48f0add9e2078761821f805c8ec96841d0a3f
- SHA256
  
  e432748809631765cd0884b57fc87e8135856957d82e3299b4c1dfe18475c5e2
- SHA512
  
  8bea7a7517ae06b2a9073f0e275307d5e6423b04292ed4cc3ba05a3b76c8c8ac3260c7b7d761c8773cc93fad2316157300b6526588039bf204335458d74c4e76
- SSDEEP
  
  1536:QQkVjEGbpBSrvnPeYJo9Vu3sQwsanTdgW/OQ/s1x3UM0+efcpsm:xkVDpBSqao9c3HwsanTdgyOxsP+f+
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy