ramnit | bd1cd66742d6a64fe01698ade6837f6a4ea8cbe73c7c8ffd2f8c512a0a490d28 | Triage

Submit
Reports

Overview

overview

Static

static

3

19b20cdad4...18.exe

windows7-x64

7

19b20cdad4...18.exe

windows10-2004-x64

Sharing

General

Target

19b20cdad4a0845f4159cd7e7cc07171_JaffaCakes118
Size

164KB
Sample

240628-lv61jawbrq
MD5

19b20cdad4a0845f4159cd7e7cc07171
SHA1

96b5955de3c049289ad098315764cd85681191c1
SHA256

bd1cd66742d6a64fe01698ade6837f6a4ea8cbe73c7c8ffd2f8c512a0a490d28
SHA512

9ca03fb39f6c38a8446bb59b5b75fa30b25089bba4997cdfb20ec40f545d358c92e42259574b25fa59680aa572a4ac645684041dd4ba766a0ede0c4c0bdd589a
SSDEEP

3072:Xuug/5q6gVLypcUYNNUMT+f02kqXlgOlxuBQb3TS/1:XuTgVLycU0U1kxixuB+DG

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

19b20cdad4a0845f4159cd7e7cc07171_JaffaCakes118.exe

Resource

win7-20240508-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

19b20cdad4a0845f4159cd7e7cc07171_JaffaCakes118.exe

Resource

win10v2004-20240611-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  19b20cdad4a0845f4159cd7e7cc07171_JaffaCakes118
- Size
  
  164KB
- MD5
  
  19b20cdad4a0845f4159cd7e7cc07171
- SHA1
  
  96b5955de3c049289ad098315764cd85681191c1
- SHA256
  
  bd1cd66742d6a64fe01698ade6837f6a4ea8cbe73c7c8ffd2f8c512a0a490d28
- SHA512
  
  9ca03fb39f6c38a8446bb59b5b75fa30b25089bba4997cdfb20ec40f545d358c92e42259574b25fa59680aa572a4ac645684041dd4ba766a0ede0c4c0bdd589a
- SSDEEP
  
  3072:Xuug/5q6gVLypcUYNNUMT+f02kqXlgOlxuBQb3TS/1:XuTgVLycU0U1kxixuB+DG
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2024

Terms | Privacy