ramnit | 18c2096859755667123361128ebee0e144fed0a9265da9f27349c6d306af0af2 | Triage

Submit
Reports

Overview

overview

Static

static

3

d9e42c15f3...18.exe

windows7-x64

7

d9e42c15f3...18.exe

windows10-2004-x64

Sharing

General

Target

d9e42c15f3e2a812d1a3310c9484eccd_JaffaCakes118
Size

322KB
Sample

241209-qy9ytazjgs
MD5

d9e42c15f3e2a812d1a3310c9484eccd
SHA1

943030dd9441bdfc1e08fb2d7b56fa6c739b17de
SHA256

18c2096859755667123361128ebee0e144fed0a9265da9f27349c6d306af0af2
SHA512

14e8e0834769cea65899a989129fdab1b5a6274cc02bea8b0a44c367789829387455117c18c3379c13ab96c38ece4ef6de3c4141d96bfe21a79a77f82c6b265e
SSDEEP

6144:2Wg2uJpPt/p64k5GjBVOTgyvOdZQGRZ4zytbLr:dg2uJpPtxIGjBgCZJ4zk3

Score

10^/10

ramnit banker defense_evasion discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

d9e42c15f3e2a812d1a3310c9484eccd_JaffaCakes118.exe

Resource

win7-20241023-en

defense_evasion discovery

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

d9e42c15f3e2a812d1a3310c9484eccd_JaffaCakes118.exe

Resource

win10v2004-20241007-en

ramnit banker defense_evasion discovery spyware stealer trojan upx worm

windows10-2004-x64

17 signatures

150 seconds

Malware Config

Targets

- Target
  
  d9e42c15f3e2a812d1a3310c9484eccd_JaffaCakes118
- Size
  
  322KB
- MD5
  
  d9e42c15f3e2a812d1a3310c9484eccd
- SHA1
  
  943030dd9441bdfc1e08fb2d7b56fa6c739b17de
- SHA256
  
  18c2096859755667123361128ebee0e144fed0a9265da9f27349c6d306af0af2
- SHA512
  
  14e8e0834769cea65899a989129fdab1b5a6274cc02bea8b0a44c367789829387455117c18c3379c13ab96c38ece4ef6de3c4141d96bfe21a79a77f82c6b265e
- SSDEEP
  
  6144:2Wg2uJpPt/p64k5GjBVOTgyvOdZQGRZ4zytbLr:dg2uJpPtxIGjBgCZJ4zk3
Score

10^/10

defense_evasion discovery ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Hijack Execution Flow

DLL Search Order Hijacking

Privilege Escalation

Hijack Execution Flow

DLL Search Order Hijacking

Defense Evasion

Hijack Execution Flow

DLL Search Order Hijacking

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

ramnitbankerdefense_evasiondiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy