ramnit | 15299dff3396df99a37e0757645e1cdb62048ef62c3d60c44c4f982057df659b | Triage

Submit
Reports

Overview

overview

Static

static

3

1692a228e1...18.dll

windows7-x64

1692a228e1...18.dll

windows10-2004-x64

7

Sharing

General

Target

1692a228e15a624c65580c5bbf1b405a_JaffaCakes118
Size

140KB
Sample

240627-s637caybkd
MD5

1692a228e15a624c65580c5bbf1b405a
SHA1

d011d97de781266aed50e8d39321170019e1ceea
SHA256

15299dff3396df99a37e0757645e1cdb62048ef62c3d60c44c4f982057df659b
SHA512

a54b8a5c931570b42fc58c955e5d54cf5f22161b630f799185854230c5b1b0d3294b6cba087fdc918a67a62f8fc54915ac810a04e26ac5fc50e65ad5617ba7d8
SSDEEP

3072:AGd5SMkaOa0SB9lI6NQ3TaI49gCxW24UydiXsvM+:fd58nSB3ZOaI4SCxW0DC

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

1692a228e15a624c65580c5bbf1b405a_JaffaCakes118.dll

Resource

win7-20240221-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

1692a228e15a624c65580c5bbf1b405a_JaffaCakes118.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  1692a228e15a624c65580c5bbf1b405a_JaffaCakes118
- Size
  
  140KB
- MD5
  
  1692a228e15a624c65580c5bbf1b405a
- SHA1
  
  d011d97de781266aed50e8d39321170019e1ceea
- SHA256
  
  15299dff3396df99a37e0757645e1cdb62048ef62c3d60c44c4f982057df659b
- SHA512
  
  a54b8a5c931570b42fc58c955e5d54cf5f22161b630f799185854230c5b1b0d3294b6cba087fdc918a67a62f8fc54915ac810a04e26ac5fc50e65ad5617ba7d8
- SSDEEP
  
  3072:AGd5SMkaOa0SB9lI6NQ3TaI49gCxW24UydiXsvM+:fd58nSB3ZOaI4SCxW0DC
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanupxworm

behavioral2

© 2018-2024

Terms | Privacy