ramnit | c66b2aaa9fff0906e2cdcfbeda4c0b1f848c117e6c4579c0918bb4a6cf18080e | Triage

Submit
Reports

Overview

overview

Static

static

3

fe096f306f...18.dll

windows7-x64

7

fe096f306f...18.dll

windows10-2004-x64

Sharing

General

Target

fe096f306f22da4145424fa903585b9f_JaffaCakes118
Size

1.3MB
Sample

241219-cpfrqasncs
MD5

fe096f306f22da4145424fa903585b9f
SHA1

dc3193c3fdb332121e6c11407381db34e946ccfe
SHA256

c66b2aaa9fff0906e2cdcfbeda4c0b1f848c117e6c4579c0918bb4a6cf18080e
SHA512

31a70e0be53328314e5e3c9d2f6677205a9f47939910cd89a6a95f81abedcd257d318a8b4fb57433153a2877a84075fdd4546bc1a790567588f1deaf7c8c0635
SSDEEP

24576:mFOoCvSZSNnCantpaOahlOr9QzHDM9ukxvIDyyG5Rdo/1Xt6pBRuGX+ftAAb:zmaujlS6HQRZIWyG574Nkp21

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

fe096f306f22da4145424fa903585b9f_JaffaCakes118.dll

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

fe096f306f22da4145424fa903585b9f_JaffaCakes118.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

15 signatures

150 seconds

Malware Config

Targets

- Target
  
  fe096f306f22da4145424fa903585b9f_JaffaCakes118
- Size
  
  1.3MB
- MD5
  
  fe096f306f22da4145424fa903585b9f
- SHA1
  
  dc3193c3fdb332121e6c11407381db34e946ccfe
- SHA256
  
  c66b2aaa9fff0906e2cdcfbeda4c0b1f848c117e6c4579c0918bb4a6cf18080e
- SHA512
  
  31a70e0be53328314e5e3c9d2f6677205a9f47939910cd89a6a95f81abedcd257d318a8b4fb57433153a2877a84075fdd4546bc1a790567588f1deaf7c8c0635
- SSDEEP
  
  24576:mFOoCvSZSNnCantpaOahlOr9QzHDM9ukxvIDyyG5Rdo/1Xt6pBRuGX+ftAAb:zmaujlS6HQRZIWyG574Nkp21
Score

10^/10

discovery ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy