ramnit | 767ac8c3ca3354eedf754649b573cdd15c242f173297c78d31cdf54e56508f21 | Triage

Submit
Reports

Overview

overview

Static

static

1

ed624a278d...8.html

windows7-x64

ed624a278d...8.html

windows10-2004-x64

3

Sharing

General

Target

ed624a278d947e7d88f6c7381bb8bccd_JaffaCakes118
Size

155KB
Sample

241214-al49sstnhl
MD5

ed624a278d947e7d88f6c7381bb8bccd
SHA1

cd57c6bc4d2b99b26878b5cdb98b766b943882a0
SHA256

767ac8c3ca3354eedf754649b573cdd15c242f173297c78d31cdf54e56508f21
SHA512

caae37f708889cd8c0f070bc53d4347c02f9122422ddd935d72fb7689890d30258a823a4aa563f1eefe19ef9d71006ad264d53f8084ba325cc9cbff13c7a1767
SSDEEP

3072:iAbkmHAovpyfkMY+BES09JXAnyrZalI+YQ:ip8VvMsMYod+X3oI+YQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

ed624a278d947e7d88f6c7381bb8bccd_JaffaCakes118.html

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

ed624a278d947e7d88f6c7381bb8bccd_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  ed624a278d947e7d88f6c7381bb8bccd_JaffaCakes118
- Size
  
  155KB
- MD5
  
  ed624a278d947e7d88f6c7381bb8bccd
- SHA1
  
  cd57c6bc4d2b99b26878b5cdb98b766b943882a0
- SHA256
  
  767ac8c3ca3354eedf754649b573cdd15c242f173297c78d31cdf54e56508f21
- SHA512
  
  caae37f708889cd8c0f070bc53d4347c02f9122422ddd935d72fb7689890d30258a823a4aa563f1eefe19ef9d71006ad264d53f8084ba325cc9cbff13c7a1767
- SSDEEP
  
  3072:iAbkmHAovpyfkMY+BES09JXAnyrZalI+YQ:ip8VvMsMYod+X3oI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy