ramnit | 4e0a0f65a1f127f87910cfc202d5964ae7f53bca2c8a07105c100ca1adfc29ae | Triage

Sharing

General

Target

JaffaCakes118_69139fa8756d5d906c5b15b16ee00e20
Size

256KB
Sample

250103-ak793avkdn
MD5

69139fa8756d5d906c5b15b16ee00e20
SHA1

c16d53e44e0527c9ebffe1306bafda3221e0dc8e
SHA256

4e0a0f65a1f127f87910cfc202d5964ae7f53bca2c8a07105c100ca1adfc29ae
SHA512

a225320e6db52a5120742e3eaf17f040df620530baf522a9b43779d6679c0d1afc60ff25b28e8cb471d05bda2a4c63e0f3dd486854debe1461b96df899a82d90
SSDEEP

3072:xwV4OgSzBmh04eZFkz3Rr0gwGj9Tf87be0hOd/Lwua:xMzzILGFkzhr0pGj9o7C0hOq

Score

10^/10

ramnit banker discovery evasion spyware stealer trojan upx worm

Malware Config

Targets

- Target
  
  JaffaCakes118_69139fa8756d5d906c5b15b16ee00e20
- Size
  
  256KB
- MD5
  
  69139fa8756d5d906c5b15b16ee00e20
- SHA1
  
  c16d53e44e0527c9ebffe1306bafda3221e0dc8e
- SHA256
  
  4e0a0f65a1f127f87910cfc202d5964ae7f53bca2c8a07105c100ca1adfc29ae
- SHA512
  
  a225320e6db52a5120742e3eaf17f040df620530baf522a9b43779d6679c0d1afc60ff25b28e8cb471d05bda2a4c63e0f3dd486854debe1461b96df899a82d90
- SSDEEP
  
  3072:xwV4OgSzBmh04eZFkz3Rr0gwGj9Tf87be0hOd/Lwua:xMzzILGFkzhr0pGj9o7C0hOq
Score

10^/10

ramnit banker spyware stealer trojan upx worm discovery evasion
- Modifies firewall policy service
  evasion
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

discoveryevasionupx