ramnit | d3025b93fc35f0754749e5bf25e9b4fe2b4e35197c352cb3013137b87b63f185 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...95.dll

windows7-x64

7

JaffaCakes...95.dll

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_7785346dc8e63867941f34f5a1eb7595
Size

213KB
Sample

250104-endbbazrfs
MD5

7785346dc8e63867941f34f5a1eb7595
SHA1

245d1fb751065ccc2d6ae0f6a8eee2f6b01d0e08
SHA256

d3025b93fc35f0754749e5bf25e9b4fe2b4e35197c352cb3013137b87b63f185
SHA512

de36e5ba82a21111b1baaa0433d15e04b9c78c876f0e964927b6a22ca0752667462f1187a2d9aae1959496d3ad8cef16615c31051ddf061e19183f252d80d26d
SSDEEP

3072:YVhI4Lyoyo8QrQCqr/eHl7G+yIic3dK4mOoKI++r/TOLWHHII7dew:cpQTQxD3dmO6r/TQWHr7P

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_7785346dc8e63867941f34f5a1eb7595.dll

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_7785346dc8e63867941f34f5a1eb7595.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

15 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_7785346dc8e63867941f34f5a1eb7595
- Size
  
  213KB
- MD5
  
  7785346dc8e63867941f34f5a1eb7595
- SHA1
  
  245d1fb751065ccc2d6ae0f6a8eee2f6b01d0e08
- SHA256
  
  d3025b93fc35f0754749e5bf25e9b4fe2b4e35197c352cb3013137b87b63f185
- SHA512
  
  de36e5ba82a21111b1baaa0433d15e04b9c78c876f0e964927b6a22ca0752667462f1187a2d9aae1959496d3ad8cef16615c31051ddf061e19183f252d80d26d
- SSDEEP
  
  3072:YVhI4Lyoyo8QrQCqr/eHl7G+yIic3dK4mOoKI++r/TOLWHHII7dew:cpQTQxD3dmO6r/TQWHr7P
Score

10^/10

discovery ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy