ramnit | ac82f778df8581a382d96c5c9c302f824ebc4278ff86f1b550d1b4d726c16e17 | Triage

Submit
Reports

Overview

overview

Static

static

1

e556e79afe...8.html

windows7-x64

e556e79afe...8.html

windows10-2004-x64

3

Sharing

General

Target

e556e79afed04f43bfad37c6bf47b303_JaffaCakes118
Size

155KB
Sample

241212-jfddkavkbv
MD5

e556e79afed04f43bfad37c6bf47b303
SHA1

6e1c6b9a9027a292d226ef853251f21471cf2b62
SHA256

ac82f778df8581a382d96c5c9c302f824ebc4278ff86f1b550d1b4d726c16e17
SHA512

2b1f5362118f374a5392a97e57b3ab35a3cbb46cbabd484a5027c524acff29628d368c3d60ef0516fad46b7c4e197f912d7ac2a23aa4b2b4bfc1ad5c34d651f9
SSDEEP

1536:idRT8JgbC3+eATOo3L6kqIJyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP06:i7Dn3yIJyfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

e556e79afed04f43bfad37c6bf47b303_JaffaCakes118.html

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

e556e79afed04f43bfad37c6bf47b303_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  e556e79afed04f43bfad37c6bf47b303_JaffaCakes118
- Size
  
  155KB
- MD5
  
  e556e79afed04f43bfad37c6bf47b303
- SHA1
  
  6e1c6b9a9027a292d226ef853251f21471cf2b62
- SHA256
  
  ac82f778df8581a382d96c5c9c302f824ebc4278ff86f1b550d1b4d726c16e17
- SHA512
  
  2b1f5362118f374a5392a97e57b3ab35a3cbb46cbabd484a5027c524acff29628d368c3d60ef0516fad46b7c4e197f912d7ac2a23aa4b2b4bfc1ad5c34d651f9
- SSDEEP
  
  1536:idRT8JgbC3+eATOo3L6kqIJyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP06:i7Dn3yIJyfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2025

Terms | Privacy