ramnit | 70737d816687015124d424d36a524b7d7b1127c6bb7930193d3aed02696a0e95 | Triage

Submit
Reports

Overview

overview

Static

static

089d62b1f6...cs.dll

windows7-x64

5

089d62b1f6...cs.dll

windows10-2004-x64

Sharing

General

Target

089d62b1f690e28e85835c027c910880_NeikiAnalytics.exe
Size

38KB
Sample

240526-2k34wsff38
MD5

089d62b1f690e28e85835c027c910880
SHA1

a535b073a12c819a70d0227e8436a8d6f0918789
SHA256

70737d816687015124d424d36a524b7d7b1127c6bb7930193d3aed02696a0e95
SHA512

111c3a817bd934e31b1cfd337ef9a07753312649f73c63f0b535a582dd23bd3e1f4f3d3b733a3f87103be310b95232ec051aa642e1657199b64c538717a0f7c8
SSDEEP

768:Bs+/gMsLIn/wIj2labk+1IsceGSnkmJ0Yblr583CJrVV7QhXUi6m2spcVV:WD8w22laSR0V+3CJrVmXZzJp

Score

10^/10

ramnit banker spyware stealer trojan worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

089d62b1f690e28e85835c027c910880_NeikiAnalytics.dll

Resource

win7-20240215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

089d62b1f690e28e85835c027c910880_NeikiAnalytics.dll

Resource

win10v2004-20240226-en

ramnit banker spyware stealer trojan worm

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  089d62b1f690e28e85835c027c910880_NeikiAnalytics.exe
- Size
  
  38KB
- MD5
  
  089d62b1f690e28e85835c027c910880
- SHA1
  
  a535b073a12c819a70d0227e8436a8d6f0918789
- SHA256
  
  70737d816687015124d424d36a524b7d7b1127c6bb7930193d3aed02696a0e95
- SHA512
  
  111c3a817bd934e31b1cfd337ef9a07753312649f73c63f0b535a582dd23bd3e1f4f3d3b733a3f87103be310b95232ec051aa642e1657199b64c538717a0f7c8
- SSDEEP
  
  768:Bs+/gMsLIn/wIj2labk+1IsceGSnkmJ0Yblr583CJrVV7QhXUi6m2spcVV:WD8w22laSR0V+3CJrVmXZzJp
Score

10^/10

ramnit banker spyware stealer trojan worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

ramnitbankerspywarestealertrojanworm

© 2018-2024

Terms | Privacy