ramnit | a4cc8cf6359e018bf8c55c49b9bc2adb26395636967af5b7aa5378a923df59bd | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

JaffaCakes...aa.exe

windows7-x64

JaffaCakes...aa.exe

windows10-2004-x64

7

Sharing

General

Target

JaffaCakes118_87df26b81dfd5b551bcac43733841faa
Size

220KB
Sample

250323-xlfb1avqv7
MD5

87df26b81dfd5b551bcac43733841faa
SHA1

08e592cd0965b77a552b715dc281185598c5ec05
SHA256

a4cc8cf6359e018bf8c55c49b9bc2adb26395636967af5b7aa5378a923df59bd
SHA512

f7973c5329a471c4a9eff506c86da942dfe39a8c83f66e9964804e4cc1f73883962d9dfac63655b06482c640e8d6f02a39d26c83f6adcd5dc4cec110b76b2282
SSDEEP

6144:Tqs2AV1rl6ahtdxxsgVPe6uFaL3i7Dn2k:TbT6qthVPIaL3i7J

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_87df26b81dfd5b551bcac43733841faa.exe

Resource

win7-20241010-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_87df26b81dfd5b551bcac43733841faa.exe

Resource

win10v2004-20250314-en

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_87df26b81dfd5b551bcac43733841faa
- Size
  
  220KB
- MD5
  
  87df26b81dfd5b551bcac43733841faa
- SHA1
  
  08e592cd0965b77a552b715dc281185598c5ec05
- SHA256
  
  a4cc8cf6359e018bf8c55c49b9bc2adb26395636967af5b7aa5378a923df59bd
- SHA512
  
  f7973c5329a471c4a9eff506c86da942dfe39a8c83f66e9964804e4cc1f73883962d9dfac63655b06482c640e8d6f02a39d26c83f6adcd5dc4cec110b76b2282
- SSDEEP
  
  6144:Tqs2AV1rl6ahtdxxsgVPe6uFaL3i7Dn2k:TbT6qthVPIaL3i7J
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2025

Terms | Privacy