ramnit | bb22308179e5f6b71ab42fc38bf44e9a693b3351b8754082ca4eab84492f80db | Triage

Submit
Reports

Overview

overview

Static

static

1

f06743ebdb...8.html

windows7-x64

f06743ebdb...8.html

windows10-2004-x64

3

Sharing

General

Target

f06743ebdba0dc27faa1c727bb52c8a4_JaffaCakes118
Size

156KB
Sample

241214-yhrrastqap
MD5

f06743ebdba0dc27faa1c727bb52c8a4
SHA1

adcf71c344b265a0a0d97f4d5f40dd0778af950d
SHA256

bb22308179e5f6b71ab42fc38bf44e9a693b3351b8754082ca4eab84492f80db
SHA512

dbc779f1c748b6b97501498fb3a8fe3ffb29a0843ac63e96e904e856e5129e7001dd004fbe4210b18a5c8549bc1131086b3b265389b21f9148f9bb62af9b61db
SSDEEP

1536:ivRTta5OA0Wx/9yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:iBi9yfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

f06743ebdba0dc27faa1c727bb52c8a4_JaffaCakes118.html

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

f06743ebdba0dc27faa1c727bb52c8a4_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  f06743ebdba0dc27faa1c727bb52c8a4_JaffaCakes118
- Size
  
  156KB
- MD5
  
  f06743ebdba0dc27faa1c727bb52c8a4
- SHA1
  
  adcf71c344b265a0a0d97f4d5f40dd0778af950d
- SHA256
  
  bb22308179e5f6b71ab42fc38bf44e9a693b3351b8754082ca4eab84492f80db
- SHA512
  
  dbc779f1c748b6b97501498fb3a8fe3ffb29a0843ac63e96e904e856e5129e7001dd004fbe4210b18a5c8549bc1131086b3b265389b21f9148f9bb62af9b61db
- SSDEEP
  
  1536:ivRTta5OA0Wx/9yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:iBi9yfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2025

Terms | Privacy