ramnit | 34be50aeadf0a3d87b46736705e81f20815dc5b85eafeffb64aef9cb0a7ec044 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...81.dll

windows7-x64

7

JaffaCakes...81.dll

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_001a88a25dca338108f6b81a4b16f581
Size

232KB
Sample

250120-1c1hcszqay
MD5

001a88a25dca338108f6b81a4b16f581
SHA1

9e154d28efc8cc8834eef2416c55edb1126431dc
SHA256

34be50aeadf0a3d87b46736705e81f20815dc5b85eafeffb64aef9cb0a7ec044
SHA512

fa15643568f88fc47841b94ba0c1cbc18b81b7b86d4001e795f575bf96a9c8a1173b9a7104b282e46a110d7087263c4336b2b7b9c7c6b6a84cd931161d91c49b
SSDEEP

3072:WOBOLWXivHYMzv2HvP5YeBTEEP2831Vr/rF8QOSta7Wez+0OZA/S8/Y5HyTZdydF:WOp8HpzdQOStKX7wAKf5HKsdSFJkRFd

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_001a88a25dca338108f6b81a4b16f581.dll

Resource

win7-20240729-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_001a88a25dca338108f6b81a4b16f581.dll

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_001a88a25dca338108f6b81a4b16f581
- Size
  
  232KB
- MD5
  
  001a88a25dca338108f6b81a4b16f581
- SHA1
  
  9e154d28efc8cc8834eef2416c55edb1126431dc
- SHA256
  
  34be50aeadf0a3d87b46736705e81f20815dc5b85eafeffb64aef9cb0a7ec044
- SHA512
  
  fa15643568f88fc47841b94ba0c1cbc18b81b7b86d4001e795f575bf96a9c8a1173b9a7104b282e46a110d7087263c4336b2b7b9c7c6b6a84cd931161d91c49b
- SSDEEP
  
  3072:WOBOLWXivHYMzv2HvP5YeBTEEP2831Vr/rF8QOSta7Wez+0OZA/S8/Y5HyTZdydF:WOp8HpzdQOStKX7wAKf5HKsdSFJkRFd
Score

10^/10

discovery ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy