ramnit | 5f30cbcdec691d557f2913773e0c7f2d412be5e8fe2dbc0e7f3e5fa2b84fe5a9 | Triage

Sharing

General

Target

JaffaCakes118_01f099691fd5ff59fd1cca1df6346253
Size

329KB
Sample

241231-djyk1s1lep
MD5

01f099691fd5ff59fd1cca1df6346253
SHA1

5332ca9c69b19846a48bb1c9a769fbe88f44f7e6
SHA256

5f30cbcdec691d557f2913773e0c7f2d412be5e8fe2dbc0e7f3e5fa2b84fe5a9
SHA512

61f06436c044e7a6ecd1968ff0cb6bbf66e9f571b687c3316edfc14a8397e4a04df51ca41e9408d562977f14e6d54f862f1fd7d8ce3dc185933abe456e6a6eb6
SSDEEP

6144:aCIGPj038tAgFMldqNX+tbP1ZZtErOiCXZzqN9VhHHt4N6DIT4nPu:Lj038t/FMldq4tbPTZG5Nj0N6A4G

Score

10^/10

ramnit banker discovery spyware stealer trojan worm

Malware Config

Targets

- Target
  
  JaffaCakes118_01f099691fd5ff59fd1cca1df6346253
- Size
  
  329KB
- MD5
  
  01f099691fd5ff59fd1cca1df6346253
- SHA1
  
  5332ca9c69b19846a48bb1c9a769fbe88f44f7e6
- SHA256
  
  5f30cbcdec691d557f2913773e0c7f2d412be5e8fe2dbc0e7f3e5fa2b84fe5a9
- SHA512
  
  61f06436c044e7a6ecd1968ff0cb6bbf66e9f571b687c3316edfc14a8397e4a04df51ca41e9408d562977f14e6d54f862f1fd7d8ce3dc185933abe456e6a6eb6
- SSDEEP
  
  6144:aCIGPj038tAgFMldqNX+tbP1ZZtErOiCXZzqN9VhHHt4N6DIT4nPu:Lj038t/FMldq4tbPTZG5Nj0N6A4G
Score

10^/10

ramnit banker discovery spyware stealer trojan worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanworm