ramnit | c22e45cc7a0b137d7e948fa336487b6ef97f6103de3ab1b350be63a3d591838c | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...18.exe

windows7-x64

JaffaCakes...18.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_3de82ff0b3b8d61d056c3ab20cf5cc18
Size

124KB
Sample

250127-kr93casjgr
MD5

3de82ff0b3b8d61d056c3ab20cf5cc18
SHA1

bd36042f4ea0f5b341aac560c4080477ed970a60
SHA256

c22e45cc7a0b137d7e948fa336487b6ef97f6103de3ab1b350be63a3d591838c
SHA512

1d590cca38b93474c54d7c617527ca04a1309f4d769e6a373ff96144e51c15facd20c604c61c2169cc0f36f4f019ee05a0d6d446cb86d3285434e89ad240c43e
SSDEEP

1536:MiaiUk2Va0vwZzRXk1OJjV5OcI/j6/ju2yjEoXJKXX0JSkRxWMSC7jGN:MTdkMa8usOxTBI/j6/aBI8uiSiZjG

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_3de82ff0b3b8d61d056c3ab20cf5cc18.exe

Resource

win7-20240903-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_3de82ff0b3b8d61d056c3ab20cf5cc18.exe

Resource

win10v2004-20241007-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_3de82ff0b3b8d61d056c3ab20cf5cc18
- Size
  
  124KB
- MD5
  
  3de82ff0b3b8d61d056c3ab20cf5cc18
- SHA1
  
  bd36042f4ea0f5b341aac560c4080477ed970a60
- SHA256
  
  c22e45cc7a0b137d7e948fa336487b6ef97f6103de3ab1b350be63a3d591838c
- SHA512
  
  1d590cca38b93474c54d7c617527ca04a1309f4d769e6a373ff96144e51c15facd20c604c61c2169cc0f36f4f019ee05a0d6d446cb86d3285434e89ad240c43e
- SSDEEP
  
  1536:MiaiUk2Va0vwZzRXk1OJjV5OcI/j6/ju2yjEoXJKXX0JSkRxWMSC7jGN:MTdkMa8usOxTBI/j6/aBI8uiSiZjG
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy