Overview

overview

10

Static

static

3

a0c0f6f4e6...cs.dll

windows7-x64

10

a0c0f6f4e6...cs.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a0c0f6f4e65f14e1f2e594d01d896b90_NeikiAnalytics.exe

  • Size

    101KB

  • Sample

    240523-edyjhada79

  • MD5

    a0c0f6f4e65f14e1f2e594d01d896b90

  • SHA1

    a3249a2529c23b4a242e1af9719d9da999038b46

  • SHA256

    19b8f8676f8ed419becbbf7f4f9875c106aef91eb1ed1a04dae8a67c2d2f5f52

  • SHA512

    c063d17797dafd41c0cb68f868b33585d06e25eb468c3bd263ca1b13afae8591e50152f491da7fb93c7513cb90169ca54cfe40f330f90d6773c78cd39d3394ca

  • SSDEEP

    3072:cGTou/Oj4ykXQd85JekqNyGtFIErSeMeTc7VPG:cGToZMY8tqNhFrSSTiZG

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      a0c0f6f4e65f14e1f2e594d01d896b90_NeikiAnalytics.exe

    • Size

      101KB

    • MD5

      a0c0f6f4e65f14e1f2e594d01d896b90

    • SHA1

      a3249a2529c23b4a242e1af9719d9da999038b46

    • SHA256

      19b8f8676f8ed419becbbf7f4f9875c106aef91eb1ed1a04dae8a67c2d2f5f52

    • SHA512

      c063d17797dafd41c0cb68f868b33585d06e25eb468c3bd263ca1b13afae8591e50152f491da7fb93c7513cb90169ca54cfe40f330f90d6773c78cd39d3394ca

    • SSDEEP

      3072:cGTou/Oj4ykXQd85JekqNyGtFIErSeMeTc7VPG:cGToZMY8tqNhFrSSTiZG

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks