ramnit | 871cbd0c0177621bb6adba47929a681facdb20149169a381a18d07376a815d0b | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...8d.dll

windows7-x64

7

JaffaCakes...8d.dll

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_6a73c854dbde20d840f744469368438d
Size

336KB
Sample

250103-fyywfa1kcs
MD5

6a73c854dbde20d840f744469368438d
SHA1

619177064a36ea968bb10ae298a169eed8ccea2e
SHA256

871cbd0c0177621bb6adba47929a681facdb20149169a381a18d07376a815d0b
SHA512

25261b8feaa64f315ef2472d362e264bf4e30d8161728734be6000249d22da60b5adeb96d363f6f86ccccd25fe9e3e7cd32d3eb1c4aeca2378d6ad789b25ad13
SSDEEP

6144:88b33QqUrSun0QheXa4MnrbN1yY6X280z:88bHQqUrS6baSSnG8y

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_6a73c854dbde20d840f744469368438d.dll

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_6a73c854dbde20d840f744469368438d.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

15 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_6a73c854dbde20d840f744469368438d
- Size
  
  336KB
- MD5
  
  6a73c854dbde20d840f744469368438d
- SHA1
  
  619177064a36ea968bb10ae298a169eed8ccea2e
- SHA256
  
  871cbd0c0177621bb6adba47929a681facdb20149169a381a18d07376a815d0b
- SHA512
  
  25261b8feaa64f315ef2472d362e264bf4e30d8161728734be6000249d22da60b5adeb96d363f6f86ccccd25fe9e3e7cd32d3eb1c4aeca2378d6ad789b25ad13
- SSDEEP
  
  6144:88b33QqUrSun0QheXa4MnrbN1yY6X280z:88bHQqUrS6baSSnG8y
Score

10^/10

discovery ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy