ramnit | 57d159ecc2f993e51d3125f22d380d3bb30a08a15731c2c4bf6373f1ad9bf7bd | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...cd.exe

windows7-x64

JaffaCakes...cd.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_03fe9b94179f300ef35172baad5f73cd
Size

158KB
Sample

250121-ms637azngj
MD5

03fe9b94179f300ef35172baad5f73cd
SHA1

bdd4c3c37e69a5fcd2982729f1270c2727c23b0c
SHA256

57d159ecc2f993e51d3125f22d380d3bb30a08a15731c2c4bf6373f1ad9bf7bd
SHA512

fa96c34d4df4820eda677430e9caee199b03339da0e9e6ec5f8ce10b8fb620bb20870fefcfd5081a708ea9823b39bb7037e8bc3349123c4b1ed0f21bf12bdac5
SSDEEP

1536:55ZZnAEjEIZvumULmj4wrraK5dZ4Ltta9Km/ec3DtAL6bmZ4bXSjrAE+fySPoqRG:PnnAQVG/LytaKItS/fiLKS+f5Aq7ip

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_03fe9b94179f300ef35172baad5f73cd.exe

Resource

win7-20241010-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_03fe9b94179f300ef35172baad5f73cd.exe

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_03fe9b94179f300ef35172baad5f73cd
- Size
  
  158KB
- MD5
  
  03fe9b94179f300ef35172baad5f73cd
- SHA1
  
  bdd4c3c37e69a5fcd2982729f1270c2727c23b0c
- SHA256
  
  57d159ecc2f993e51d3125f22d380d3bb30a08a15731c2c4bf6373f1ad9bf7bd
- SHA512
  
  fa96c34d4df4820eda677430e9caee199b03339da0e9e6ec5f8ce10b8fb620bb20870fefcfd5081a708ea9823b39bb7037e8bc3349123c4b1ed0f21bf12bdac5
- SSDEEP
  
  1536:55ZZnAEjEIZvumULmj4wrraK5dZ4Ltta9Km/ec3DtAL6bmZ4bXSjrAE+fySPoqRG:PnnAQVG/LytaKItS/fiLKS+f5Aq7ip
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy