ramnit | c657bc6465b440ec235a5005068e44c4e43c8192b9ac7274a5c83a56f45e5233 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...a0.dll

windows7-x64

JaffaCakes...a0.dll

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_6a9b4a0c56a45d6d5baaac141ce6dea0
Size

248KB
Sample

250103-gkc79a1rbv
MD5

6a9b4a0c56a45d6d5baaac141ce6dea0
SHA1

1dd6ef608a38c445fe28b00dc32667f16df5716c
SHA256

c657bc6465b440ec235a5005068e44c4e43c8192b9ac7274a5c83a56f45e5233
SHA512

e601cd531bb192d067a8acf57c87343ce5702734d8a60dd4bd16d4f0b50434939b0ffe9ce97356488b782f688d30464e779fa334a6c9a594debc16c6f3945b3c
SSDEEP

6144:imgl8rhDM/2yT/Cw0B2uJ2s4otqFCJrW9FqvSbqsHasHAH3HBHlHDAGtlRXZ+CPx:tU866w0B2uJ2s4otqFCJrW9FqvSbqsH7

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_6a9b4a0c56a45d6d5baaac141ce6dea0.dll

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_6a9b4a0c56a45d6d5baaac141ce6dea0.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_6a9b4a0c56a45d6d5baaac141ce6dea0
- Size
  
  248KB
- MD5
  
  6a9b4a0c56a45d6d5baaac141ce6dea0
- SHA1
  
  1dd6ef608a38c445fe28b00dc32667f16df5716c
- SHA256
  
  c657bc6465b440ec235a5005068e44c4e43c8192b9ac7274a5c83a56f45e5233
- SHA512
  
  e601cd531bb192d067a8acf57c87343ce5702734d8a60dd4bd16d4f0b50434939b0ffe9ce97356488b782f688d30464e779fa334a6c9a594debc16c6f3945b3c
- SSDEEP
  
  6144:imgl8rhDM/2yT/Cw0B2uJ2s4otqFCJrW9FqvSbqsHasHAH3HBHlHDAGtlRXZ+CPx:tU866w0B2uJ2s4otqFCJrW9FqvSbqsH7
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy