ramnit | e6cf3a5fa5c2f1c5d49511fb9605ec81b974c4fd1a53b4efd706aa922bd00dff | Triage

Submit
Reports

Overview

overview

Static

static

0d1341d7ef...cs.dll

windows7-x64

7

0d1341d7ef...cs.dll

windows10-2004-x64

Sharing

General

Target

0d1341d7efacf540c26b741bc1561410_NeikiAnalytics.exe
Size

67KB
Sample

240526-3n3g7shc83
MD5

0d1341d7efacf540c26b741bc1561410
SHA1

6d86439a576ca18145831b4f9d26edb9e1f51140
SHA256

e6cf3a5fa5c2f1c5d49511fb9605ec81b974c4fd1a53b4efd706aa922bd00dff
SHA512

72fa4438a74e86437ee1e5853a9d4250725b3e5b8132837bac50314f6675eea325edbff3866114a76ef7ead08b2c56fbbee69513c03fddad644741a30a81149d
SSDEEP

1536:GJ4UwPZgpoc1wzruMEUYCB+2H0do0iZs3:GOx+poHHuDUYCBMoXs3

Score

10^/10

ramnit banker spyware stealer trojan worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

0d1341d7efacf540c26b741bc1561410_NeikiAnalytics.dll

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

0d1341d7efacf540c26b741bc1561410_NeikiAnalytics.dll

Resource

win10v2004-20240508-en

ramnit banker spyware stealer trojan worm

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  0d1341d7efacf540c26b741bc1561410_NeikiAnalytics.exe
- Size
  
  67KB
- MD5
  
  0d1341d7efacf540c26b741bc1561410
- SHA1
  
  6d86439a576ca18145831b4f9d26edb9e1f51140
- SHA256
  
  e6cf3a5fa5c2f1c5d49511fb9605ec81b974c4fd1a53b4efd706aa922bd00dff
- SHA512
  
  72fa4438a74e86437ee1e5853a9d4250725b3e5b8132837bac50314f6675eea325edbff3866114a76ef7ead08b2c56fbbee69513c03fddad644741a30a81149d
- SSDEEP
  
  1536:GJ4UwPZgpoc1wzruMEUYCB+2H0do0iZs3:GOx+poHHuDUYCBMoXs3
Score

10^/10

ramnit banker spyware stealer trojan worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

ramnitbankerspywarestealertrojanworm

© 2018-2024

Terms | Privacy