ramnit | 81fb3d7407c2748969ca07dbaccf9fbb67c808a4e63b9b890ef0e85e78b81d8f | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...10.exe

windows7-x64

JaffaCakes...10.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_4c483b142b4e92f0b8cce83145e71f10
Size

129KB
Sample

250101-ja4nka1mfp
MD5

4c483b142b4e92f0b8cce83145e71f10
SHA1

03d4ef761d9ab8a7ef4a61f3fac76ba42b905904
SHA256

81fb3d7407c2748969ca07dbaccf9fbb67c808a4e63b9b890ef0e85e78b81d8f
SHA512

ff5d10d60b3348225936b83983f06d135b834dcff88711dbeb1a313e96eb71877e995aa93600b61e6fdae48f2fc8339c52464209b4c0eced0b4677f6ca29d5c0
SSDEEP

3072:HJBGKgiWncy+o1z1Asbyf5yTh6s3JbrFlIvmK0WL+V0tDCa:pBGxiWnoo1z+saATh6EJXLIvZSV09Ca

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_4c483b142b4e92f0b8cce83145e71f10.exe

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_4c483b142b4e92f0b8cce83145e71f10.exe

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_4c483b142b4e92f0b8cce83145e71f10
- Size
  
  129KB
- MD5
  
  4c483b142b4e92f0b8cce83145e71f10
- SHA1
  
  03d4ef761d9ab8a7ef4a61f3fac76ba42b905904
- SHA256
  
  81fb3d7407c2748969ca07dbaccf9fbb67c808a4e63b9b890ef0e85e78b81d8f
- SHA512
  
  ff5d10d60b3348225936b83983f06d135b834dcff88711dbeb1a313e96eb71877e995aa93600b61e6fdae48f2fc8339c52464209b4c0eced0b4677f6ca29d5c0
- SSDEEP
  
  3072:HJBGKgiWncy+o1z1Asbyf5yTh6s3JbrFlIvmK0WL+V0tDCa:pBGxiWnoo1z+saATh6EJXLIvZSV09Ca
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy