ramnit | b936816df3b31e7cb746c1d9bcd33321ef046fb7ef10088eed11b4ddc64e0bda | Triage

Submit
Reports

Overview

overview

Static

static

5

f7794eb295...18.exe

windows7-x64

f7794eb295...18.exe

windows10-2004-x64

5

Sharing

General

Target

f7794eb2956b63c251a9e04f01a353fe_JaffaCakes118
Size

106KB
Sample

241216-fw6hhaxlgr
MD5

f7794eb2956b63c251a9e04f01a353fe
SHA1

dca1a5b3b43feebbb5c53d4b9e2d499d326b7ced
SHA256

b936816df3b31e7cb746c1d9bcd33321ef046fb7ef10088eed11b4ddc64e0bda
SHA512

a30ff8e92c1ea762d7332b2b8b277425f38982310fab56733f49d56f314962758826945552c319e45781ae92857924ced6fc24220c9bcb4790afeb64559e5ba6
SSDEEP

1536:tOC0FvV4OguHxjhpA4Bm7uW0vSUsghQevBFkutIbgTuFqKRr0aF5frleGhd9TfB5:twV4OgSzBmh04eZFkz3Rr0gwGj9Tf8C

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

f7794eb2956b63c251a9e04f01a353fe_JaffaCakes118.exe

Resource

win7-20240729-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

f7794eb2956b63c251a9e04f01a353fe_JaffaCakes118.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  f7794eb2956b63c251a9e04f01a353fe_JaffaCakes118
- Size
  
  106KB
- MD5
  
  f7794eb2956b63c251a9e04f01a353fe
- SHA1
  
  dca1a5b3b43feebbb5c53d4b9e2d499d326b7ced
- SHA256
  
  b936816df3b31e7cb746c1d9bcd33321ef046fb7ef10088eed11b4ddc64e0bda
- SHA512
  
  a30ff8e92c1ea762d7332b2b8b277425f38982310fab56733f49d56f314962758826945552c319e45781ae92857924ced6fc24220c9bcb4790afeb64559e5ba6
- SSDEEP
  
  1536:tOC0FvV4OguHxjhpA4Bm7uW0vSUsghQevBFkutIbgTuFqKRr0aF5frleGhd9TfB5:twV4OgSzBmh04eZFkz3Rr0gwGj9Tf8C
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy