ramnit | 0aec4d94beaf24e41d07199a1df985a1661bbe7f5191b05a06c309996196238f | Triage

Submit
Reports

Overview

overview

Static

static

1

ee77ff8727...8.html

windows7-x64

ee77ff8727...8.html

windows10-2004-x64

3

Sharing

General

Target

ee77ff8727bf1ad7472cc440eeb0eb77_JaffaCakes118
Size

155KB
Sample

241214-nahhjs1qcm
MD5

ee77ff8727bf1ad7472cc440eeb0eb77
SHA1

fad0db3f5694028a181e44a9c2e5f5200b32a435
SHA256

0aec4d94beaf24e41d07199a1df985a1661bbe7f5191b05a06c309996196238f
SHA512

02b5b5854db4c78f64ac130ad6586aac8d26f14ab5d2ac22c263492899983230f9020162fe725de405fab187b2c4468cb331e1e609965599a27b4814fec98aa1
SSDEEP

3072:iX4PqhH55P47yfkMY+BES09JXAnyrZalI+YQ:ioS+esMYod+X3oI+YQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

ee77ff8727bf1ad7472cc440eeb0eb77_JaffaCakes118.html

Resource

win7-20241023-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

ee77ff8727bf1ad7472cc440eeb0eb77_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  ee77ff8727bf1ad7472cc440eeb0eb77_JaffaCakes118
- Size
  
  155KB
- MD5
  
  ee77ff8727bf1ad7472cc440eeb0eb77
- SHA1
  
  fad0db3f5694028a181e44a9c2e5f5200b32a435
- SHA256
  
  0aec4d94beaf24e41d07199a1df985a1661bbe7f5191b05a06c309996196238f
- SHA512
  
  02b5b5854db4c78f64ac130ad6586aac8d26f14ab5d2ac22c263492899983230f9020162fe725de405fab187b2c4468cb331e1e609965599a27b4814fec98aa1
- SSDEEP
  
  3072:iX4PqhH55P47yfkMY+BES09JXAnyrZalI+YQ:ioS+esMYod+X3oI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy