ramnit | 5b933eaa8427fff7db0e3e604f40f289329fa0941ff5a5322afbc11a1fab90f9 | Triage

Submit
Reports

Overview

overview

Static

static

1

df4c0ee763...8.html

windows7-x64

df4c0ee763...8.html

windows10-2004-x64

3

Sharing

General

Target

df4c0ee7637e95a38d8133c2c81b415b_JaffaCakes118
Size

158KB
Sample

241211-bhlhyssqcq
MD5

df4c0ee7637e95a38d8133c2c81b415b
SHA1

dd38ab5d6c9647a6cba9598f9e11b9e3db1143f5
SHA256

5b933eaa8427fff7db0e3e604f40f289329fa0941ff5a5322afbc11a1fab90f9
SHA512

197434b8f4b6cb91cee5a6c48341d07394d9b7500006efb03be3f638abe3737a48ab18624ab686f255b8b0f8c847546fda45384ae6ab1c7cea14b44c537690a6
SSDEEP

1536:iPJRTFJO9fvZmqkyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJA:i3swqkyfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

df4c0ee7637e95a38d8133c2c81b415b_JaffaCakes118.html

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

df4c0ee7637e95a38d8133c2c81b415b_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  df4c0ee7637e95a38d8133c2c81b415b_JaffaCakes118
- Size
  
  158KB
- MD5
  
  df4c0ee7637e95a38d8133c2c81b415b
- SHA1
  
  dd38ab5d6c9647a6cba9598f9e11b9e3db1143f5
- SHA256
  
  5b933eaa8427fff7db0e3e604f40f289329fa0941ff5a5322afbc11a1fab90f9
- SHA512
  
  197434b8f4b6cb91cee5a6c48341d07394d9b7500006efb03be3f638abe3737a48ab18624ab686f255b8b0f8c847546fda45384ae6ab1c7cea14b44c537690a6
- SSDEEP
  
  1536:iPJRTFJO9fvZmqkyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJA:i3swqkyfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2025

Terms | Privacy