ramnit | 52f22db7e1b444d0c1023323650c120c5c0d0e8cd87cd836a8fb2577db2968e9 | Triage

Submit
Reports

Overview

overview

Static

static

1

dcedcaa16c...8.html

windows7-x64

dcedcaa16c...8.html

windows10-2004-x64

3

Sharing

General

Target

dcedcaa16c03806c95b6297b3aacae9a_JaffaCakes118
Size

158KB
Sample

241210-ennr2sykal
MD5

dcedcaa16c03806c95b6297b3aacae9a
SHA1

8f9c9f171d5f2d93318e4c1f7bf367233ee2c6a2
SHA256

52f22db7e1b444d0c1023323650c120c5c0d0e8cd87cd836a8fb2577db2968e9
SHA512

b8a960028ef1fe8da3fcffd61caba185bf4e3b0fcc8b7c41a998fe15aae255bdeb47d8b6ea145707ceb5c851542ae486e0b206570c34dab490e27908fcf7b525
SSDEEP

1536:iYRTNclA6Wy//yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:iS4h/yfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

dcedcaa16c03806c95b6297b3aacae9a_JaffaCakes118.html

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

dcedcaa16c03806c95b6297b3aacae9a_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  dcedcaa16c03806c95b6297b3aacae9a_JaffaCakes118
- Size
  
  158KB
- MD5
  
  dcedcaa16c03806c95b6297b3aacae9a
- SHA1
  
  8f9c9f171d5f2d93318e4c1f7bf367233ee2c6a2
- SHA256
  
  52f22db7e1b444d0c1023323650c120c5c0d0e8cd87cd836a8fb2577db2968e9
- SHA512
  
  b8a960028ef1fe8da3fcffd61caba185bf4e3b0fcc8b7c41a998fe15aae255bdeb47d8b6ea145707ceb5c851542ae486e0b206570c34dab490e27908fcf7b525
- SSDEEP
  
  1536:iYRTNclA6Wy//yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:iS4h/yfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2025

Terms | Privacy