ramnit | 1fe361674b5bafd2e5f0929593349ddf82bc431cb30e327c68a5d67a7f31a972 | Triage

Submit
Reports

Overview

overview

Static

static

1

daf0c6a26a...8.html

windows7-x64

daf0c6a26a...8.html

windows10-2004-x64

3

Sharing

General

Target

daf0c6a26a1ac30455c85e3090d043c8_JaffaCakes118
Size

158KB
Sample

241209-w3z73awqd1
MD5

daf0c6a26a1ac30455c85e3090d043c8
SHA1

45f6255f6977299786fbe295938c243a343b3187
SHA256

1fe361674b5bafd2e5f0929593349ddf82bc431cb30e327c68a5d67a7f31a972
SHA512

f362ad763730195ed0a8b3911a458f49a8cdaa5c527dc24c0ca64cf5a1ff9b9a6893b0843b3027efdfba37242a00ca4543f14812f37f136a7456215e6d6db131
SSDEEP

1536:i6EBRTGB6Imh8n9wylByLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXu:itsByfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

daf0c6a26a1ac30455c85e3090d043c8_JaffaCakes118.html

Resource

win7-20240729-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

daf0c6a26a1ac30455c85e3090d043c8_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  daf0c6a26a1ac30455c85e3090d043c8_JaffaCakes118
- Size
  
  158KB
- MD5
  
  daf0c6a26a1ac30455c85e3090d043c8
- SHA1
  
  45f6255f6977299786fbe295938c243a343b3187
- SHA256
  
  1fe361674b5bafd2e5f0929593349ddf82bc431cb30e327c68a5d67a7f31a972
- SHA512
  
  f362ad763730195ed0a8b3911a458f49a8cdaa5c527dc24c0ca64cf5a1ff9b9a6893b0843b3027efdfba37242a00ca4543f14812f37f136a7456215e6d6db131
- SSDEEP
  
  1536:i6EBRTGB6Imh8n9wylByLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXu:itsByfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2025

Terms | Privacy