ramnit | e9e9088de53a528bc1a1c74c97b7ca2ae1f335d3cb18fc5d005a20c5bb180315 | Triage

Submit
Reports

Overview

overview

Static

static

1

ebb59f22b1...8.html

windows7-x64

ebb59f22b1...8.html

windows10-2004-x64

3

Sharing

General

Target

ebb59f22b1ecc8de521483ad53eae27f_JaffaCakes118
Size

1.0MB
Sample

241213-qnslsazkhw
MD5

ebb59f22b1ecc8de521483ad53eae27f
SHA1

f01cc7c03f0b4c658287cc35c643be21609759fc
SHA256

e9e9088de53a528bc1a1c74c97b7ca2ae1f335d3cb18fc5d005a20c5bb180315
SHA512

f1294da2ba0bb48d35c6666ea8cb0bfb6e2f3ee7402543da829cf5cc9763a13aba665b21a436f288accd72cc96be256c11e6397fa2afffbb0569b30a40004391
SSDEEP

12288:im5d+X3zjVw5d+X3zjV25d+X3zjVh5d+X3zjVw5d+X3zjVV5d+X3zjVP:iE+TjE+Tj6+Tjv+Tj0+TjX+TjZ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

ebb59f22b1ecc8de521483ad53eae27f_JaffaCakes118.html

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral2

Sample

ebb59f22b1ecc8de521483ad53eae27f_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  ebb59f22b1ecc8de521483ad53eae27f_JaffaCakes118
- Size
  
  1.0MB
- MD5
  
  ebb59f22b1ecc8de521483ad53eae27f
- SHA1
  
  f01cc7c03f0b4c658287cc35c643be21609759fc
- SHA256
  
  e9e9088de53a528bc1a1c74c97b7ca2ae1f335d3cb18fc5d005a20c5bb180315
- SHA512
  
  f1294da2ba0bb48d35c6666ea8cb0bfb6e2f3ee7402543da829cf5cc9763a13aba665b21a436f288accd72cc96be256c11e6397fa2afffbb0569b30a40004391
- SSDEEP
  
  12288:im5d+X3zjVw5d+X3zjV25d+X3zjVh5d+X3zjVw5d+X3zjVV5d+X3zjVP:iE+TjE+Tj6+Tjv+Tj0+TjX+TjZ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy