ramnit | 06fadfd8fbbcc3ed357335b3e2fe0788f0fe21b90ef4e8dd970fb782ed129a17 | Triage

Submit
Reports

Overview

overview

Static

static

3

eb21479b09...18.dll

windows7-x64

eb21479b09...18.dll

windows10-2004-x64

Sharing

General

Target

eb21479b09dc43d3944cc05855197ad0_JaffaCakes118
Size

238KB
Sample

241213-mrtfpswjg1
MD5

eb21479b09dc43d3944cc05855197ad0
SHA1

22ce15c820a7f5b359336b3e27c9237eaf961b47
SHA256

06fadfd8fbbcc3ed357335b3e2fe0788f0fe21b90ef4e8dd970fb782ed129a17
SHA512

dfc837c8b1852e00465c93be72d20ee978199504a2a58b63d1fbaf10e8eb84391090d3a9caf2d7e062256a8c840aa48457f64bede52a7fa0fac727a77e68dc29
SSDEEP

6144:i9MuyyWjkUSsnUscIf4kEqcm/Y/qILPxCdZ2:iu7jkUM/I4q5QS0pCP2

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

eb21479b09dc43d3944cc05855197ad0_JaffaCakes118.dll

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

eb21479b09dc43d3944cc05855197ad0_JaffaCakes118.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  eb21479b09dc43d3944cc05855197ad0_JaffaCakes118
- Size
  
  238KB
- MD5
  
  eb21479b09dc43d3944cc05855197ad0
- SHA1
  
  22ce15c820a7f5b359336b3e27c9237eaf961b47
- SHA256
  
  06fadfd8fbbcc3ed357335b3e2fe0788f0fe21b90ef4e8dd970fb782ed129a17
- SHA512
  
  dfc837c8b1852e00465c93be72d20ee978199504a2a58b63d1fbaf10e8eb84391090d3a9caf2d7e062256a8c840aa48457f64bede52a7fa0fac727a77e68dc29
- SSDEEP
  
  6144:i9MuyyWjkUSsnUscIf4kEqcm/Y/qILPxCdZ2:iu7jkUM/I4q5QS0pCP2
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2024

Terms | Privacy