ramnit | 2d3e6cf5f626655d4f23c165ee97f8c4a4943b7f909eb8864c0ac7408c48a3fd | Triage

Submit
Reports

Overview

overview

Static

static

1

f210523f72...8.html

windows7-x64

f210523f72...8.html

windows10-2004-x64

3

Sharing

General

Target

f210523f720b82d442e814829e83f384_JaffaCakes118
Size

147KB
Sample

241215-dze4lsvjdl
MD5

f210523f720b82d442e814829e83f384
SHA1

a076d418d7eda5944f9513b95574a6b41b31e58d
SHA256

2d3e6cf5f626655d4f23c165ee97f8c4a4943b7f909eb8864c0ac7408c48a3fd
SHA512

1085fc65e4900d13c5149b3da10815dfe80a9261547dfc67c67adb8d297979cc44294fe7576165c6118479a8cd9ff1b4779c7644f6e40b27ace736a2f406506f
SSDEEP

1536:vHNs6SF2tq5XT3uyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJA:hqXd+yfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

f210523f720b82d442e814829e83f384_JaffaCakes118.html

Resource

win7-20241010-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

f210523f720b82d442e814829e83f384_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  f210523f720b82d442e814829e83f384_JaffaCakes118
- Size
  
  147KB
- MD5
  
  f210523f720b82d442e814829e83f384
- SHA1
  
  a076d418d7eda5944f9513b95574a6b41b31e58d
- SHA256
  
  2d3e6cf5f626655d4f23c165ee97f8c4a4943b7f909eb8864c0ac7408c48a3fd
- SHA512
  
  1085fc65e4900d13c5149b3da10815dfe80a9261547dfc67c67adb8d297979cc44294fe7576165c6118479a8cd9ff1b4779c7644f6e40b27ace736a2f406506f
- SSDEEP
  
  1536:vHNs6SF2tq5XT3uyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJA:hqXd+yfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy