ramnit | 57fa35077af92d1503c3087f15211ca382ce16a2f112c45a701f0f3eea1c783f | Triage

Submit
Reports

Overview

overview

Static

static

3

1a8b6c4280...18.dll

windows7-x64

1

1a8b6c4280...18.dll

windows10-2004-x64

Sharing

General

Target

1a8b6c428068e13d2267e6d472a58043_JaffaCakes118
Size

432KB
Sample

240701-j1x9ga1akg
MD5

1a8b6c428068e13d2267e6d472a58043
SHA1

d34ebe11df590c564c807d1926fb84f629bea695
SHA256

57fa35077af92d1503c3087f15211ca382ce16a2f112c45a701f0f3eea1c783f
SHA512

999adcecb76172d9a35a508f35c658b337a97531cf647d8688239c71fe600e1fd87f93e5efff3d25a93240521bdaac86b25ef0346dae0d63f393fa736f1015fe
SSDEEP

12288:+u13/R/3OeX7yQ5xn1ky/jd/RsvktFbkPc7DiPBEcr8:d5/eeX7P5b3jdZiUk8wBEY8

Score

10^/10

ramnit banker spyware stealer trojan upx worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

1a8b6c428068e13d2267e6d472a58043_JaffaCakes118.dll

Resource

win7-20240611-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

1a8b6c428068e13d2267e6d472a58043_JaffaCakes118.dll

Resource

win10v2004-20240508-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  1a8b6c428068e13d2267e6d472a58043_JaffaCakes118
- Size
  
  432KB
- MD5
  
  1a8b6c428068e13d2267e6d472a58043
- SHA1
  
  d34ebe11df590c564c807d1926fb84f629bea695
- SHA256
  
  57fa35077af92d1503c3087f15211ca382ce16a2f112c45a701f0f3eea1c783f
- SHA512
  
  999adcecb76172d9a35a508f35c658b337a97531cf647d8688239c71fe600e1fd87f93e5efff3d25a93240521bdaac86b25ef0346dae0d63f393fa736f1015fe
- SSDEEP
  
  12288:+u13/R/3OeX7yQ5xn1ky/jd/RsvktFbkPc7DiPBEcr8:d5/eeX7P5b3jdZiUk8wBEY8
Score

10^/10

ramnit banker spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2

ramnitbankerspywarestealertrojanupxworm

© 2018-2024

Terms | Privacy