ramnit | dd3ac8d75efc90cb2efded23faf3053df31d83b3284c8c7beab912dedc44a66b | Triage

Submit
Reports

Overview

overview

Static

static

1

ede899b9a6...8.html

windows7-x64

ede899b9a6...8.html

windows10-2004-x64

3

Sharing

General

Target

ede899b9a6474939dd5936f789a28f23_JaffaCakes118
Size

158KB
Sample

241214-kf11aswphy
MD5

ede899b9a6474939dd5936f789a28f23
SHA1

6a4e732cf927d8d6c5a951144cf8ce60ec0d836e
SHA256

dd3ac8d75efc90cb2efded23faf3053df31d83b3284c8c7beab912dedc44a66b
SHA512

dd9fbb8628650c46f8db1981b19b4b3431ae6ed9da69027a74fbcaa5645f08ac54c85f39e73468f12d9f786cd1dce4416e5530c072ad44359ccf0380eec82122
SSDEEP

1536:iDRTzP6AFN1Dbo4yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJA:itjo4yfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

ede899b9a6474939dd5936f789a28f23_JaffaCakes118.html

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

ede899b9a6474939dd5936f789a28f23_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  ede899b9a6474939dd5936f789a28f23_JaffaCakes118
- Size
  
  158KB
- MD5
  
  ede899b9a6474939dd5936f789a28f23
- SHA1
  
  6a4e732cf927d8d6c5a951144cf8ce60ec0d836e
- SHA256
  
  dd3ac8d75efc90cb2efded23faf3053df31d83b3284c8c7beab912dedc44a66b
- SHA512
  
  dd9fbb8628650c46f8db1981b19b4b3431ae6ed9da69027a74fbcaa5645f08ac54c85f39e73468f12d9f786cd1dce4416e5530c072ad44359ccf0380eec82122
- SSDEEP
  
  1536:iDRTzP6AFN1Dbo4yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJA:itjo4yfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy