ramnit | 6cfa79cd2b8cc9f976c612c75c8b1b5af2f379e72cbe4128b274738e6d625244 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...ce.dll

windows11-21h2-x64

Resubmissions

25-01-2025 13:30

250125-qrr5esvkc1 10

25-01-2025 13:10

250125-qehefstpdv 10

Sharing

General

Target

JaffaCakes118_2bf426318958fc998b4bffef442628ce
Size

432KB
Sample

250125-qrr5esvkc1
MD5

2bf426318958fc998b4bffef442628ce
SHA1

32930819231971ebfa3e7325725c081107c76240
SHA256

6cfa79cd2b8cc9f976c612c75c8b1b5af2f379e72cbe4128b274738e6d625244
SHA512

53451a27b4851cd9d633d71e8b7d2e08c6cf62150400ce135c395c40ab1d4e4b83f005394eaf00bb381c2bc6bbfa49a5691e2da3296d811501518c26516bb0c3
SSDEEP

12288:eXo450qjYthuCNIm/kqF6a2FjyHIDiNmcs:3/ku6FjyHeWt

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_2bf426318958fc998b4bffef442628ce.dll

Resource

win11-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows11-21h2-x64

14 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_2bf426318958fc998b4bffef442628ce
- Size
  
  432KB
- MD5
  
  2bf426318958fc998b4bffef442628ce
- SHA1
  
  32930819231971ebfa3e7325725c081107c76240
- SHA256
  
  6cfa79cd2b8cc9f976c612c75c8b1b5af2f379e72cbe4128b274738e6d625244
- SHA512
  
  53451a27b4851cd9d633d71e8b7d2e08c6cf62150400ce135c395c40ab1d4e4b83f005394eaf00bb381c2bc6bbfa49a5691e2da3296d811501518c26516bb0c3
- SSDEEP
  
  12288:eXo450qjYthuCNIm/kqF6a2FjyHIDiNmcs:3/ku6FjyHeWt
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy