ramnit | 4689cd9a4d942089b562e9305799ec80e3e43e2c2f5263a9cc04b76221419915 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

JaffaCakes...9a.exe

windows7-x64

JaffaCakes...9a.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_88c3b3ad0c6b2fc32e6ef3c2faccf79a
Size

97KB
Sample

250325-3jjjjaxqs4
MD5

88c3b3ad0c6b2fc32e6ef3c2faccf79a
SHA1

918383986a7d005c67a79bcea7dc41ce193acd05
SHA256

4689cd9a4d942089b562e9305799ec80e3e43e2c2f5263a9cc04b76221419915
SHA512

e1810ec794ad6fc6baea8655761fff0f74ad0d212a45a02f8a769081b2cad76d951bb2d674e71c5477a9194e8261a30b01ebbd973fd43f41661b8d69f319fe67
SSDEEP

1536:UzZZpp48Zd0lo+4EMMyO3OexOSEowTwBjzvcmJoxDWqfqNII2Ca29:CZSlI/HUOjSiToj7CEqfqg29

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_88c3b3ad0c6b2fc32e6ef3c2faccf79a.exe

Resource

win7-20240903-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_88c3b3ad0c6b2fc32e6ef3c2faccf79a.exe

Resource

win10v2004-20250314-en

ramnit banker discovery spyware stealer trojan upx worm

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_88c3b3ad0c6b2fc32e6ef3c2faccf79a
- Size
  
  97KB
- MD5
  
  88c3b3ad0c6b2fc32e6ef3c2faccf79a
- SHA1
  
  918383986a7d005c67a79bcea7dc41ce193acd05
- SHA256
  
  4689cd9a4d942089b562e9305799ec80e3e43e2c2f5263a9cc04b76221419915
- SHA512
  
  e1810ec794ad6fc6baea8655761fff0f74ad0d212a45a02f8a769081b2cad76d951bb2d674e71c5477a9194e8261a30b01ebbd973fd43f41661b8d69f319fe67
- SSDEEP
  
  1536:UzZZpp48Zd0lo+4EMMyO3OexOSEowTwBjzvcmJoxDWqfqNII2Ca29:CZSlI/HUOjSiToj7CEqfqg29
Score

10^/10

ramnit banker spyware stealer trojan upx worm discovery
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanupxworm

© 2018-2025

Terms | Privacy