ramnit | 5c719001aab4b676ab6a0819ec3fd42c340c9d32043c0785b5af16da45aadfe1 | Triage

Submit
Reports

Overview

overview

Static

static

a2f32690a1...cs.dll

windows7-x64

a2f32690a1...cs.dll

windows10-2004-x64

Sharing

General

Target

a2f32690a1d65add45baaa207d1e0890_NeikiAnalytics.exe
Size

68KB
Sample

240526-y7llksba3z
MD5

a2f32690a1d65add45baaa207d1e0890
SHA1

484d4d561c7afe1b9770d645aa63793b70030fdb
SHA256

5c719001aab4b676ab6a0819ec3fd42c340c9d32043c0785b5af16da45aadfe1
SHA512

fdc1e4fc139ec149b546e194949d5f81ac215b69fb0d6981f9c858de9e785a6d32bc65464ad69f26decd4adca7b9414b7443cae12d5bb13252f9839c3bfd3775
SSDEEP

1536:MLNd/Pk7btaoX7DypKr0wNNYIUSS9eyBx20iZs3w:GNhY5aora80mNYI7+2Xs3

Score

10^/10

ramnit banker spyware stealer trojan worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

a2f32690a1d65add45baaa207d1e0890_NeikiAnalytics.dll

Resource

win7-20240221-en

ramnit banker spyware stealer trojan worm

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

a2f32690a1d65add45baaa207d1e0890_NeikiAnalytics.dll

Resource

win10v2004-20240508-en

ramnit banker spyware stealer trojan worm

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  a2f32690a1d65add45baaa207d1e0890_NeikiAnalytics.exe
- Size
  
  68KB
- MD5
  
  a2f32690a1d65add45baaa207d1e0890
- SHA1
  
  484d4d561c7afe1b9770d645aa63793b70030fdb
- SHA256
  
  5c719001aab4b676ab6a0819ec3fd42c340c9d32043c0785b5af16da45aadfe1
- SHA512
  
  fdc1e4fc139ec149b546e194949d5f81ac215b69fb0d6981f9c858de9e785a6d32bc65464ad69f26decd4adca7b9414b7443cae12d5bb13252f9839c3bfd3775
- SSDEEP
  
  1536:MLNd/Pk7btaoX7DypKr0wNNYIUSS9eyBx20iZs3w:GNhY5aora80mNYI7+2Xs3
Score

10^/10

ramnit banker spyware stealer trojan worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanworm

behavioral2

ramnitbankerspywarestealertrojanworm

© 2018-2024

Terms | Privacy