ramnit | 9fb13640a8e43b62905100150503bb61313d84701b9f752edce2e8c78fc3d169 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...b6.exe

windows7-x64

JaffaCakes...b6.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_08d77f3e3666bb7079c2262145f782b6
Size

236KB
Sample

241231-ha2njasmbz
MD5

08d77f3e3666bb7079c2262145f782b6
SHA1

9394ec98a13a5172d68bae96dadba829e684c548
SHA256

9fb13640a8e43b62905100150503bb61313d84701b9f752edce2e8c78fc3d169
SHA512

5f23ebf282cc1b81bd9ef968b4854d20b64d9e7f7e05e022921aaef0355f30f4d0364cab0f0f98adcb65f56d43ed586c67455b5d8686aeaf177c1b6d2e53621f
SSDEEP

3072:okAwuzhjdRmSZiAv4QZiY8l5tfhbwau4yqRZ3fTnzY3QfzZqrt:Uwch/7PQQZ5k5tfhbhrRZLzVfUrt

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_08d77f3e3666bb7079c2262145f782b6.exe

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_08d77f3e3666bb7079c2262145f782b6.exe

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_08d77f3e3666bb7079c2262145f782b6
- Size
  
  236KB
- MD5
  
  08d77f3e3666bb7079c2262145f782b6
- SHA1
  
  9394ec98a13a5172d68bae96dadba829e684c548
- SHA256
  
  9fb13640a8e43b62905100150503bb61313d84701b9f752edce2e8c78fc3d169
- SHA512
  
  5f23ebf282cc1b81bd9ef968b4854d20b64d9e7f7e05e022921aaef0355f30f4d0364cab0f0f98adcb65f56d43ed586c67455b5d8686aeaf177c1b6d2e53621f
- SSDEEP
  
  3072:okAwuzhjdRmSZiAv4QZiY8l5tfhbwau4yqRZ3fTnzY3QfzZqrt:Uwch/7PQQZ5k5tfhbhrRZLzVfUrt
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy