ramnit | 5582dbe625d86c6ebb4d9c6eb4a4e92a97d5a566135eec76af2c75243cef101e | Triage

Submit
Reports

Overview

overview

Static

static

0d905f2155...cs.dll

windows7-x64

7

0d905f2155...cs.dll

windows10-2004-x64

Sharing

General

Target

0d905f2155dd1ccafd9a27ebf4e55eb0_NeikiAnalytics.exe
Size

68KB
Sample

240526-3s617ahe33
MD5

0d905f2155dd1ccafd9a27ebf4e55eb0
SHA1

0b807dd47faba7cf3b8c7a7b52a8840e57499223
SHA256

5582dbe625d86c6ebb4d9c6eb4a4e92a97d5a566135eec76af2c75243cef101e
SHA512

c0de4a4fe7776565882ab55d603c03b685b82c1facbd372c20eea16a6808e6c6e4a9674dd54110457a88b899f7e0c97dc3bae5fb6b8daf87349f435f0649a461
SSDEEP

1536:MLNd/Pk7btaoX7DypKr0wNuYIUSS9eyBYBW0iZs3L:GNhY5aora80muYI7DBWXs3

Score

10^/10

ramnit banker spyware stealer trojan worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

0d905f2155dd1ccafd9a27ebf4e55eb0_NeikiAnalytics.dll

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

0d905f2155dd1ccafd9a27ebf4e55eb0_NeikiAnalytics.dll

Resource

win10v2004-20240508-en

ramnit banker spyware stealer trojan worm

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  0d905f2155dd1ccafd9a27ebf4e55eb0_NeikiAnalytics.exe
- Size
  
  68KB
- MD5
  
  0d905f2155dd1ccafd9a27ebf4e55eb0
- SHA1
  
  0b807dd47faba7cf3b8c7a7b52a8840e57499223
- SHA256
  
  5582dbe625d86c6ebb4d9c6eb4a4e92a97d5a566135eec76af2c75243cef101e
- SHA512
  
  c0de4a4fe7776565882ab55d603c03b685b82c1facbd372c20eea16a6808e6c6e4a9674dd54110457a88b899f7e0c97dc3bae5fb6b8daf87349f435f0649a461
- SSDEEP
  
  1536:MLNd/Pk7btaoX7DypKr0wNuYIUSS9eyBYBW0iZs3L:GNhY5aora80muYI7DBWXs3
Score

10^/10

ramnit banker spyware stealer trojan worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

ramnitbankerspywarestealertrojanworm

© 2018-2024

Terms | Privacy