ramnit | 53ea57206a22fff27b5c2eb61e05372e236497d6d044c1a7eb087624857eb1dc | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...81.exe

windows7-x64

JaffaCakes...81.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_8ab9a1a11c26a4be632d7b4c5f411b81
Size

102KB
Sample

250328-q1ln1awyet
MD5

8ab9a1a11c26a4be632d7b4c5f411b81
SHA1

1b3bcd217b5efa2ae787d33657c643ff6fa4834c
SHA256

53ea57206a22fff27b5c2eb61e05372e236497d6d044c1a7eb087624857eb1dc
SHA512

dcb935aa318f37d4e251ce048108377be43bd8526c6a05eae874dc5af57e25d852574887272628382e63cb7b1fe2ae96c25cbb38c96cac0f699d8e5e2f9bd3a4
SSDEEP

3072:wUC7Bb6nkkRdRePLaZPp19DfOqjwaaHw7Koj4rt:zRXRePedBfOd

Score

10^/10

ramnit banker discovery spyware stealer trojan worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_8ab9a1a11c26a4be632d7b4c5f411b81.exe

Resource

win7-20241010-en

ramnit banker spyware stealer trojan worm

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_8ab9a1a11c26a4be632d7b4c5f411b81.exe

Resource

win10v2004-20250314-en

ramnit banker discovery spyware stealer trojan worm

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_8ab9a1a11c26a4be632d7b4c5f411b81
- Size
  
  102KB
- MD5
  
  8ab9a1a11c26a4be632d7b4c5f411b81
- SHA1
  
  1b3bcd217b5efa2ae787d33657c643ff6fa4834c
- SHA256
  
  53ea57206a22fff27b5c2eb61e05372e236497d6d044c1a7eb087624857eb1dc
- SHA512
  
  dcb935aa318f37d4e251ce048108377be43bd8526c6a05eae874dc5af57e25d852574887272628382e63cb7b1fe2ae96c25cbb38c96cac0f699d8e5e2f9bd3a4
- SSDEEP
  
  3072:wUC7Bb6nkkRdRePLaZPp19DfOqjwaaHw7Koj4rt:zRXRePedBfOd
Score

10^/10

ramnit banker spyware stealer trojan worm discovery
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanworm

behavioral2

ramnitbankerdiscoveryspywarestealertrojanworm

© 2018-2025

Terms | Privacy