ramnit | 76eeb5503a8584acc586988761662df8ca471e4ceed629bd75fc2d5bbec298f5 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...70.dll

windows7-x64

JaffaCakes...70.dll

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_4b069b150167286b5178257c73bd1570
Size

340KB
Sample

250101-hjpekazpfk
MD5

4b069b150167286b5178257c73bd1570
SHA1

510a293e7065b497643701b0689c3dcf77cb5c19
SHA256

76eeb5503a8584acc586988761662df8ca471e4ceed629bd75fc2d5bbec298f5
SHA512

35d847cacc1fe6fbe1db59c587c8c12c46469ecaf06da447273cdb323fdf5ae56e60d0d8d604b43c953c6c9877a2ec097befe42761f6b795c3f641af969f1d60
SSDEEP

6144:ihSD9V2hdLI5FvQYsyx/mVHBSxilz+OBfIS4:Um2h1Inxsyx/mVQxillSS4

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_4b069b150167286b5178257c73bd1570.dll

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_4b069b150167286b5178257c73bd1570.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_4b069b150167286b5178257c73bd1570
- Size
  
  340KB
- MD5
  
  4b069b150167286b5178257c73bd1570
- SHA1
  
  510a293e7065b497643701b0689c3dcf77cb5c19
- SHA256
  
  76eeb5503a8584acc586988761662df8ca471e4ceed629bd75fc2d5bbec298f5
- SHA512
  
  35d847cacc1fe6fbe1db59c587c8c12c46469ecaf06da447273cdb323fdf5ae56e60d0d8d604b43c953c6c9877a2ec097befe42761f6b795c3f641af969f1d60
- SSDEEP
  
  6144:ihSD9V2hdLI5FvQYsyx/mVHBSxilz+OBfIS4:Um2h1Inxsyx/mVQxillSS4
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy