ramnit | 7693ca479523dba9b70de7b59e35c22572783dc819a106c9610df0f7d49e593a | Triage

Submit
Reports

Overview

overview

Static

static

5

f3f8ba2383...18.exe

windows7-x64

f3f8ba2383...18.exe

windows10-2004-x64

7

Sharing

General

Target

f3f8ba238381c41e2c30698f8ddd1065_JaffaCakes118
Size

160KB
Sample

241215-ph5tgswjgl
MD5

f3f8ba238381c41e2c30698f8ddd1065
SHA1

8ab1ed3fb41d9f4653165e8b00c64187cbee8da1
SHA256

7693ca479523dba9b70de7b59e35c22572783dc819a106c9610df0f7d49e593a
SHA512

d67e22df519631c674a38d939f01d94e57b16beded0c0b59d7c6a4bfe6f44d266c6fa9b2e284111bedf1f3cf72f09dbe6cd2f29002326d9a7ba74faef0c1f66b
SSDEEP

1536:+aMmKEB9SeVOkNV9qpAUY539HpWwmgNkww5lx5LvLvEWgDAgvWSr0pG8HfKLdHPk:Q29xzP53PWwnzelxiA8r0pGlHPJl

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

f3f8ba238381c41e2c30698f8ddd1065_JaffaCakes118.exe

Resource

win7-20240708-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

f3f8ba238381c41e2c30698f8ddd1065_JaffaCakes118.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  f3f8ba238381c41e2c30698f8ddd1065_JaffaCakes118
- Size
  
  160KB
- MD5
  
  f3f8ba238381c41e2c30698f8ddd1065
- SHA1
  
  8ab1ed3fb41d9f4653165e8b00c64187cbee8da1
- SHA256
  
  7693ca479523dba9b70de7b59e35c22572783dc819a106c9610df0f7d49e593a
- SHA512
  
  d67e22df519631c674a38d939f01d94e57b16beded0c0b59d7c6a4bfe6f44d266c6fa9b2e284111bedf1f3cf72f09dbe6cd2f29002326d9a7ba74faef0c1f66b
- SSDEEP
  
  1536:+aMmKEB9SeVOkNV9qpAUY539HpWwmgNkww5lx5LvLvEWgDAgvWSr0pG8HfKLdHPk:Q29xzP53PWwnzelxiA8r0pGlHPJl
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2025

Terms | Privacy