ramnit | eafe5477fe4e2814feb13af27adb06ec0f4e10938e07ebb0c7753c00bb03450d | Triage

Submit
Reports

Overview

overview

Static

static

1

f90c8eaa05...8.html

windows7-x64

f90c8eaa05...8.html

windows10-2004-x64

3

Sharing

General

Target

f90c8eaa05270a2f6038c7e7d49c1770_JaffaCakes118
Size

334KB
Sample

241217-14jzpazmfw
MD5

f90c8eaa05270a2f6038c7e7d49c1770
SHA1

c1eb724d827ee89fe03a9940e31c0dec2a1dc8c2
SHA256

eafe5477fe4e2814feb13af27adb06ec0f4e10938e07ebb0c7753c00bb03450d
SHA512

97e89af6be672509413dbbebbb8f5469a14b8edd10a82ef4c869605a2914adba43ad11b3097b448cb64637f98bae1a45fd3c35f9a61ca4023673af4fc5a6457a
SSDEEP

6144:STsMYod+X3oI+Y+sMYod+X3oI+Y9sMYod+X3oI+YQ:w5d+X3e5d+X335d+X3+

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

f90c8eaa05270a2f6038c7e7d49c1770_JaffaCakes118.html

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

f90c8eaa05270a2f6038c7e7d49c1770_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  f90c8eaa05270a2f6038c7e7d49c1770_JaffaCakes118
- Size
  
  334KB
- MD5
  
  f90c8eaa05270a2f6038c7e7d49c1770
- SHA1
  
  c1eb724d827ee89fe03a9940e31c0dec2a1dc8c2
- SHA256
  
  eafe5477fe4e2814feb13af27adb06ec0f4e10938e07ebb0c7753c00bb03450d
- SHA512
  
  97e89af6be672509413dbbebbb8f5469a14b8edd10a82ef4c869605a2914adba43ad11b3097b448cb64637f98bae1a45fd3c35f9a61ca4023673af4fc5a6457a
- SSDEEP
  
  6144:STsMYod+X3oI+Y+sMYod+X3oI+Y9sMYod+X3oI+YQ:w5d+X3e5d+X335d+X3+
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy