ramnit | 7a7d4d36fd62bffd75b37218e1bf7e34bf9706b18a9aab609197b864479f4fb3 | Triage

Submit
Reports

Overview

overview

Static

static

defb74e977...cs.dll

windows7-x64

defb74e977...cs.dll

windows10-2004-x64

Sharing

General

Target

defb74e97725c3fd02f2596ed98680e0_NeikiAnalytics.exe
Size

127KB
Sample

240525-be2qrshc76
MD5

defb74e97725c3fd02f2596ed98680e0
SHA1

d3b8048f556d69533130d77f42ec85c7f6fe3d23
SHA256

7a7d4d36fd62bffd75b37218e1bf7e34bf9706b18a9aab609197b864479f4fb3
SHA512

b52e1891894156930cfb30e7dd219e912abf1478d01247b0f60ace9ee3d7c09d555832daa27e21a921a9b41a917383af6f13fc19aeac927872d092e3395ecedb
SSDEEP

3072:OMbIWiyr7pjvTvoBFEbWwIUJlTBft3+x+D:OCIWiyr7JQn16lTBl3+x

Score

10^/10

ramnit banker spyware stealer trojan worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

defb74e97725c3fd02f2596ed98680e0_NeikiAnalytics.dll

Resource

win7-20240215-en

ramnit banker spyware stealer trojan worm

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

defb74e97725c3fd02f2596ed98680e0_NeikiAnalytics.dll

Resource

win10v2004-20240426-en

ramnit banker spyware stealer trojan worm

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  defb74e97725c3fd02f2596ed98680e0_NeikiAnalytics.exe
- Size
  
  127KB
- MD5
  
  defb74e97725c3fd02f2596ed98680e0
- SHA1
  
  d3b8048f556d69533130d77f42ec85c7f6fe3d23
- SHA256
  
  7a7d4d36fd62bffd75b37218e1bf7e34bf9706b18a9aab609197b864479f4fb3
- SHA512
  
  b52e1891894156930cfb30e7dd219e912abf1478d01247b0f60ace9ee3d7c09d555832daa27e21a921a9b41a917383af6f13fc19aeac927872d092e3395ecedb
- SSDEEP
  
  3072:OMbIWiyr7pjvTvoBFEbWwIUJlTBft3+x+D:OCIWiyr7JQn16lTBl3+x
Score

10^/10

ramnit banker spyware stealer trojan worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanworm

behavioral2

ramnitbankerspywarestealertrojanworm

© 2018-2024

Terms | Privacy