ramnit | fa2b8206aa085ebe8aab2f0b7b96385d2fdc609209ce0cc08721aa679b92f9ff | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

1

dc6b4eeaa1...8.html

windows7-x64

dc6b4eeaa1...8.html

windows10-2004-x64

3

Sharing

General

Target

dc6b4eeaa137107c10e5b88673b38798_JaffaCakes118
Size

133KB
Sample

241210-b1py4atnhn
MD5

dc6b4eeaa137107c10e5b88673b38798
SHA1

df789b5023fd4c12f1154059919e83315e87c500
SHA256

fa2b8206aa085ebe8aab2f0b7b96385d2fdc609209ce0cc08721aa679b92f9ff
SHA512

0bc0604066fc5efb35037d699aeb29cae9abf3c1d03bcd7ec43d4bae2efb8923d77c52e4efc15003f4de2185e98390781728b22480d57c21e105aca95649e400
SSDEEP

1536:ScXY5cMJNyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOZ:ScIuMJNyfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

dc6b4eeaa137107c10e5b88673b38798_JaffaCakes118.html

Resource

win7-20241023-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

dc6b4eeaa137107c10e5b88673b38798_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  dc6b4eeaa137107c10e5b88673b38798_JaffaCakes118
- Size
  
  133KB
- MD5
  
  dc6b4eeaa137107c10e5b88673b38798
- SHA1
  
  df789b5023fd4c12f1154059919e83315e87c500
- SHA256
  
  fa2b8206aa085ebe8aab2f0b7b96385d2fdc609209ce0cc08721aa679b92f9ff
- SHA512
  
  0bc0604066fc5efb35037d699aeb29cae9abf3c1d03bcd7ec43d4bae2efb8923d77c52e4efc15003f4de2185e98390781728b22480d57c21e105aca95649e400
- SSDEEP
  
  1536:ScXY5cMJNyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOZ:ScIuMJNyfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2025

Terms | Privacy