ramnit | 23edf0e3c3bba38cf485c75dea2210a69d8e43a5a98eec6a8c93fab6b79c6406 | Triage

Submit
Reports

Overview

overview

Static

static

1

fa2452b313...8.html

windows7-x64

fa2452b313...8.html

windows10-2004-x64

3

Sharing

General

Target

fa2452b3135d0aff8be3599ae4bf0a39_JaffaCakes118
Size

159KB
Sample

241218-fccfbatle1
MD5

fa2452b3135d0aff8be3599ae4bf0a39
SHA1

fc5e359d90556bec1c73120fbb2222bb75943794
SHA256

23edf0e3c3bba38cf485c75dea2210a69d8e43a5a98eec6a8c93fab6b79c6406
SHA512

8de0ce8395b78a82c47e8f47580dd3bf4b870a83b8c56f48c16d78d27494dfa2a4fbef8f6ceab4cb4afc17095091821486a857275c6d6fadbfc7a356e97a30a4
SSDEEP

1536:iJRTE0JIcDVqXhyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:ivGcohyfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

fa2452b3135d0aff8be3599ae4bf0a39_JaffaCakes118.html

Resource

win7-20240708-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

fa2452b3135d0aff8be3599ae4bf0a39_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  fa2452b3135d0aff8be3599ae4bf0a39_JaffaCakes118
- Size
  
  159KB
- MD5
  
  fa2452b3135d0aff8be3599ae4bf0a39
- SHA1
  
  fc5e359d90556bec1c73120fbb2222bb75943794
- SHA256
  
  23edf0e3c3bba38cf485c75dea2210a69d8e43a5a98eec6a8c93fab6b79c6406
- SHA512
  
  8de0ce8395b78a82c47e8f47580dd3bf4b870a83b8c56f48c16d78d27494dfa2a4fbef8f6ceab4cb4afc17095091821486a857275c6d6fadbfc7a356e97a30a4
- SSDEEP
  
  1536:iJRTE0JIcDVqXhyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:ivGcohyfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy