ramnit | 286614d009a71407449c62ab9568636801a19b5d9e9520da35f59c17ef6a9751 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...2d.exe

windows7-x64

JaffaCakes...2d.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_f30e5f3d993ac23c09cc5bf03ac8e62d
Size

94KB
Sample

250120-v5v6fs1kes
MD5

f30e5f3d993ac23c09cc5bf03ac8e62d
SHA1

d9291b5e93b71bba35caef6be5e3ede2d46c3e98
SHA256

286614d009a71407449c62ab9568636801a19b5d9e9520da35f59c17ef6a9751
SHA512

c81cec3a585fdda284b97b3f10a9789172425786217f9bd1cedb2d28e5637cfdafdd4d3f92408bd528e0016bb2738d0a8c72ce19befc42458e9da95f5402a149
SSDEEP

768:JEzQE2+b7B1T4t7vI2NiN+U4ZmTX7CaKf+ibj55VTQ1RBkMoas0Qz3FGnuYoEqc:J235b7vkmVN+1e3c+ibV561RBhoB1Eqc

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_f30e5f3d993ac23c09cc5bf03ac8e62d.exe

Resource

win7-20241010-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_f30e5f3d993ac23c09cc5bf03ac8e62d.exe

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_f30e5f3d993ac23c09cc5bf03ac8e62d
- Size
  
  94KB
- MD5
  
  f30e5f3d993ac23c09cc5bf03ac8e62d
- SHA1
  
  d9291b5e93b71bba35caef6be5e3ede2d46c3e98
- SHA256
  
  286614d009a71407449c62ab9568636801a19b5d9e9520da35f59c17ef6a9751
- SHA512
  
  c81cec3a585fdda284b97b3f10a9789172425786217f9bd1cedb2d28e5637cfdafdd4d3f92408bd528e0016bb2738d0a8c72ce19befc42458e9da95f5402a149
- SSDEEP
  
  768:JEzQE2+b7B1T4t7vI2NiN+U4ZmTX7CaKf+ibj55VTQ1RBkMoas0Qz3FGnuYoEqc:J235b7vkmVN+1e3c+ibV561RBhoB1Eqc
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy