ramnit | 899dc33fab3d88eafaeae7c2b5c00da0c79788985ac12fb3cc0ff8170625b1b1 | Triage

Submit
Reports

Overview

overview

Static

static

1

ff25aaf0b0...8.html

windows7-x64

ff25aaf0b0...8.html

windows10-2004-x64

3

Sharing

General

Target

ff25aaf0b04d00c681eab0352bb88ed2_JaffaCakes118
Size

158KB
Sample

241219-kcvzwaxlhl
MD5

ff25aaf0b04d00c681eab0352bb88ed2
SHA1

34be6d24eae07a3676ee6e3e0231ebb18600ffae
SHA256

899dc33fab3d88eafaeae7c2b5c00da0c79788985ac12fb3cc0ff8170625b1b1
SHA512

ebdb3891b0a1011ba60a678e669f7b93cf11b567182f7c1c0c5854cf8bdbb8445ba06f7311fb1c0f0a135de51d514fb4fe78fa8836f97be6835eed8f619d5020
SSDEEP

1536:iDRT4anXz9DTOUpuyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:it9uyfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

ff25aaf0b04d00c681eab0352bb88ed2_JaffaCakes118.html

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

ff25aaf0b04d00c681eab0352bb88ed2_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  ff25aaf0b04d00c681eab0352bb88ed2_JaffaCakes118
- Size
  
  158KB
- MD5
  
  ff25aaf0b04d00c681eab0352bb88ed2
- SHA1
  
  34be6d24eae07a3676ee6e3e0231ebb18600ffae
- SHA256
  
  899dc33fab3d88eafaeae7c2b5c00da0c79788985ac12fb3cc0ff8170625b1b1
- SHA512
  
  ebdb3891b0a1011ba60a678e669f7b93cf11b567182f7c1c0c5854cf8bdbb8445ba06f7311fb1c0f0a135de51d514fb4fe78fa8836f97be6835eed8f619d5020
- SSDEEP
  
  1536:iDRT4anXz9DTOUpuyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:it9uyfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy