ramnit | 3dd175f6561fb4d84d448c8cae4ef75146b8ddc1760fd6e83bc9fa694eaaf95e | Triage

Submit
Reports

Overview

overview

Static

static

4

fd9ffd3abb...8.html

windows7-x64

fd9ffd3abb...8.html

windows10-2004-x64

3

Sharing

General

Target

fd9ffd3abb58282626668384c9dd5e2a_JaffaCakes118
Size

126KB
Sample

241218-3z5fyaylgj
MD5

fd9ffd3abb58282626668384c9dd5e2a
SHA1

f80c3d36bf95a8232ea1fae60bd195f0a0764ee3
SHA256

3dd175f6561fb4d84d448c8cae4ef75146b8ddc1760fd6e83bc9fa694eaaf95e
SHA512

b53c672b482a6701b31556eecc716a259f3b1ba54ddad7192e45982a9798ce79cde24982a19ad31af90ffdfeb92ccbb1ed1c3dce9370afea404578ed40f41117
SSDEEP

1536:SwvHlMOlg5EyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBw:SXuyfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker discovery phishing spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

fd9ffd3abb58282626668384c9dd5e2a_JaffaCakes118.html

Resource

win7-20240708-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

fd9ffd3abb58282626668384c9dd5e2a_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  fd9ffd3abb58282626668384c9dd5e2a_JaffaCakes118
- Size
  
  126KB
- MD5
  
  fd9ffd3abb58282626668384c9dd5e2a
- SHA1
  
  f80c3d36bf95a8232ea1fae60bd195f0a0764ee3
- SHA256
  
  3dd175f6561fb4d84d448c8cae4ef75146b8ddc1760fd6e83bc9fa694eaaf95e
- SHA512
  
  b53c672b482a6701b31556eecc716a259f3b1ba54ddad7192e45982a9798ce79cde24982a19ad31af90ffdfeb92ccbb1ed1c3dce9370afea404578ed40f41117
- SSDEEP
  
  1536:SwvHlMOlg5EyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBw:SXuyfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy