ramnit | 2fce4ac36941177fdb800ed0ff9cc471ba542b2011d8fd718b446f23033352b6 | Triage

Submit
Reports

Overview

overview

Static

static

1

ed84a5ab24...8.html

windows7-x64

ed84a5ab24...8.html

windows10-2004-x64

3

Sharing

General

Target

ed84a5ab246862c4c6b177ca45a92414_JaffaCakes118
Size

156KB
Sample

241214-hkzlxsvkft
MD5

ed84a5ab246862c4c6b177ca45a92414
SHA1

11a22b2a853c3c2fbc36ae1ccd3b7eaea84fa3c1
SHA256

2fce4ac36941177fdb800ed0ff9cc471ba542b2011d8fd718b446f23033352b6
SHA512

a2e6a2a134fa95e7aeb278b54063d4867556cb2ffed193dffd3a1447d20d6faf2eb2bee9c1b1a7a664031b2ddf6441349d49c4d5501eb825404e484a0b10c37f
SSDEEP

1536:icRTf/J3fZDL+eyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:ieVZeeyfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

ed84a5ab246862c4c6b177ca45a92414_JaffaCakes118.html

Resource

win7-20240729-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

ed84a5ab246862c4c6b177ca45a92414_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  ed84a5ab246862c4c6b177ca45a92414_JaffaCakes118
- Size
  
  156KB
- MD5
  
  ed84a5ab246862c4c6b177ca45a92414
- SHA1
  
  11a22b2a853c3c2fbc36ae1ccd3b7eaea84fa3c1
- SHA256
  
  2fce4ac36941177fdb800ed0ff9cc471ba542b2011d8fd718b446f23033352b6
- SHA512
  
  a2e6a2a134fa95e7aeb278b54063d4867556cb2ffed193dffd3a1447d20d6faf2eb2bee9c1b1a7a664031b2ddf6441349d49c4d5501eb825404e484a0b10c37f
- SSDEEP
  
  1536:icRTf/J3fZDL+eyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:ieVZeeyfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2025

Terms | Privacy