ramnit | 555f1d1171b73f5eae8ab19c3d574c4d1e01c59f3d79595303ffd891fea4c349 | Triage

Submit
Reports

Overview

overview

Static

static

3

e0d22cacbb...18.dll

windows7-x64

e0d22cacbb...18.dll

windows10-2004-x64

7

Sharing

General

Target

e0d22cacbb3528701ae70fa8c8a464a8_JaffaCakes118
Size

222KB
Sample

241211-le3m6s1mhr
MD5

e0d22cacbb3528701ae70fa8c8a464a8
SHA1

b0e6997e5508e73a07c532e86e8ea391c1bc7367
SHA256

555f1d1171b73f5eae8ab19c3d574c4d1e01c59f3d79595303ffd891fea4c349
SHA512

497608652fa9c4d3237d34f616c7d7914820b05ab37d074ba5ef0ebd547b2389d3ad569fa2bd3d28d92b580090c22854377b95b0d3a3ffeb63ccfb039a3d8a83
SSDEEP

3072:AQTT2V0qYKm/M8EMXIGXmw/IYGWJ0KtBHQyhOtLDuBwmHbtKwEc5I9UKk3KaO:VTThRM8ZIGXmw/T0KtP8tpQtnIWKj

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

e0d22cacbb3528701ae70fa8c8a464a8_JaffaCakes118.dll

Resource

win7-20240708-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

e0d22cacbb3528701ae70fa8c8a464a8_JaffaCakes118.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  e0d22cacbb3528701ae70fa8c8a464a8_JaffaCakes118
- Size
  
  222KB
- MD5
  
  e0d22cacbb3528701ae70fa8c8a464a8
- SHA1
  
  b0e6997e5508e73a07c532e86e8ea391c1bc7367
- SHA256
  
  555f1d1171b73f5eae8ab19c3d574c4d1e01c59f3d79595303ffd891fea4c349
- SHA512
  
  497608652fa9c4d3237d34f616c7d7914820b05ab37d074ba5ef0ebd547b2389d3ad569fa2bd3d28d92b580090c22854377b95b0d3a3ffeb63ccfb039a3d8a83
- SSDEEP
  
  3072:AQTT2V0qYKm/M8EMXIGXmw/IYGWJ0KtBHQyhOtLDuBwmHbtKwEc5I9UKk3KaO:VTThRM8ZIGXmw/T0KtP8tpQtnIWKj
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2025

Terms | Privacy