ramnit | df6444c4ab878a77bfd025f9a7c10d291d8d6908c7f8f440576b5a0c898c375a | Triage

Sharing

General

Target

JaffaCakes118_78dd54266eb3d448247caf9e877364c5
Size

272KB
Sample

250104-k7bjqavncp
MD5

78dd54266eb3d448247caf9e877364c5
SHA1

2acdf9e27cf556996707dad6470c90b2895ce9f5
SHA256

df6444c4ab878a77bfd025f9a7c10d291d8d6908c7f8f440576b5a0c898c375a
SHA512

c1a6693fd9dd4725c6ffb3b8fc8e8bce5c912a9e4d95230c0a1b42d02d4b5fca0b89ae1e1a650c1d5403a8b551ab2a0eef981b307c158dc4504ee6f52bdefc90
SSDEEP

6144:k4y8gOB2NdmKbctyE4a8hTuviZqQvymZD+kDVku/mz:Zy8gTRiviZqQbh+kxHmz

Score

10^/10

ramnit banker discovery spyware stealer trojan worm

Malware Config

Targets

- Target
  
  JaffaCakes118_78dd54266eb3d448247caf9e877364c5
- Size
  
  272KB
- MD5
  
  78dd54266eb3d448247caf9e877364c5
- SHA1
  
  2acdf9e27cf556996707dad6470c90b2895ce9f5
- SHA256
  
  df6444c4ab878a77bfd025f9a7c10d291d8d6908c7f8f440576b5a0c898c375a
- SHA512
  
  c1a6693fd9dd4725c6ffb3b8fc8e8bce5c912a9e4d95230c0a1b42d02d4b5fca0b89ae1e1a650c1d5403a8b551ab2a0eef981b307c158dc4504ee6f52bdefc90
- SSDEEP
  
  6144:k4y8gOB2NdmKbctyE4a8hTuviZqQvymZD+kDVku/mz:Zy8gTRiviZqQbh+kxHmz
Score

10^/10

ramnit banker discovery spyware stealer trojan worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanworm