ramnit | 378ad37d66e546b65d9fc4b0882540d8cc570460ab180cddb5d74af923b19971 | Triage

Submit
Reports

Overview

overview

Static

static

1

f5d7a79206...8.html

windows7-x64

f5d7a79206...8.html

windows10-2004-x64

3

Sharing

General

Target

f5d7a7920629564ca7e7b5cdd6637950_JaffaCakes118
Size

124KB
Sample

241215-1g8pjaxqgv
MD5

f5d7a7920629564ca7e7b5cdd6637950
SHA1

841f261156e2aa6310b44b6958830e1b61568439
SHA256

378ad37d66e546b65d9fc4b0882540d8cc570460ab180cddb5d74af923b19971
SHA512

85071d587080c075b5ff55d113ff65083aa1aa1321516d603b00839edbd470f60e2c96de55622e25cbd8905df8205438c60cd61e4fd1dfbf2ff8730769d745cb
SSDEEP

1536:SOZupRm/JkaNyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:SOQbukaNyfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

f5d7a7920629564ca7e7b5cdd6637950_JaffaCakes118.html

Resource

win7-20241010-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

f5d7a7920629564ca7e7b5cdd6637950_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  f5d7a7920629564ca7e7b5cdd6637950_JaffaCakes118
- Size
  
  124KB
- MD5
  
  f5d7a7920629564ca7e7b5cdd6637950
- SHA1
  
  841f261156e2aa6310b44b6958830e1b61568439
- SHA256
  
  378ad37d66e546b65d9fc4b0882540d8cc570460ab180cddb5d74af923b19971
- SHA512
  
  85071d587080c075b5ff55d113ff65083aa1aa1321516d603b00839edbd470f60e2c96de55622e25cbd8905df8205438c60cd61e4fd1dfbf2ff8730769d745cb
- SSDEEP
  
  1536:SOZupRm/JkaNyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:SOQbukaNyfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy