ramnit | c5952fe5d41cfc72c16148c31ddbebc8fc2ef6577776b5fef5d22a01b913d35f | Triage

Submit
Reports

Overview

overview

Static

static

f7101fcd3e...cs.dll

windows7-x64

f7101fcd3e...cs.dll

windows10-2004-x64

Sharing

General

Target

f7101fcd3ef0a8562dbbcf2947bae8d0_NeikiAnalytics.exe
Size

68KB
Sample

240525-fp34ssfc2s
MD5

f7101fcd3ef0a8562dbbcf2947bae8d0
SHA1

89412d66a65cf7da511d4330084da31085509bbd
SHA256

c5952fe5d41cfc72c16148c31ddbebc8fc2ef6577776b5fef5d22a01b913d35f
SHA512

c2140f91a0ca6e6cbb8cd435dcbeecf62da8abf36a0ea372b0262bc0855aa8dc2d928624dc3dbfd310d059820491e4ad97e3aaa38de17811d143c57a66a59673
SSDEEP

1536:MLNd/Pk7btaoX7DypKr0wNHYIUSS9eyBFzbW0iZs3f:GNhY5aora80mHYI7ObWXs3

Score

10^/10

ramnit banker spyware stealer trojan worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

f7101fcd3ef0a8562dbbcf2947bae8d0_NeikiAnalytics.dll

Resource

win7-20240508-en

ramnit banker spyware stealer trojan worm

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

f7101fcd3ef0a8562dbbcf2947bae8d0_NeikiAnalytics.dll

Resource

win10v2004-20240508-en

ramnit banker spyware stealer trojan worm

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  f7101fcd3ef0a8562dbbcf2947bae8d0_NeikiAnalytics.exe
- Size
  
  68KB
- MD5
  
  f7101fcd3ef0a8562dbbcf2947bae8d0
- SHA1
  
  89412d66a65cf7da511d4330084da31085509bbd
- SHA256
  
  c5952fe5d41cfc72c16148c31ddbebc8fc2ef6577776b5fef5d22a01b913d35f
- SHA512
  
  c2140f91a0ca6e6cbb8cd435dcbeecf62da8abf36a0ea372b0262bc0855aa8dc2d928624dc3dbfd310d059820491e4ad97e3aaa38de17811d143c57a66a59673
- SSDEEP
  
  1536:MLNd/Pk7btaoX7DypKr0wNHYIUSS9eyBFzbW0iZs3f:GNhY5aora80mHYI7ObWXs3
Score

10^/10

ramnit banker spyware stealer trojan worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanworm

behavioral2

ramnitbankerspywarestealertrojanworm

© 2018-2024

Terms | Privacy