ramnit | 042c0ff8e658b9b9b86134cf0aecc96f95a37ab5c0c8b9ed935432d20b9a38c8 | Triage

Submit
Reports

Overview

overview

Static

static

4862b08d09...cs.dll

windows7-x64

4862b08d09...cs.dll

windows10-2004-x64

Sharing

General

Target

4862b08d097e6ce910d0209f40862c00_NeikiAnalytics.exe
Size

68KB
Sample

240529-g438sadb7t
MD5

4862b08d097e6ce910d0209f40862c00
SHA1

d227aae9b114674dcdbe398868e338655306785a
SHA256

042c0ff8e658b9b9b86134cf0aecc96f95a37ab5c0c8b9ed935432d20b9a38c8
SHA512

478b0f87fc3df13431fad44d7d08bab7cdcc878feeb8e2734792873fab14dcf00afb724baa887439712aa8a6b0a104ed206e4265c4f26319f986f3bfec0cf7af
SSDEEP

1536:MLNd/Pk7btaoX7DypKr0wNIYIUSS9eyBX5Q0iZs3V:GNhY5aora80mIYI7i5QXs3

Score

10^/10

ramnit banker spyware stealer trojan worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

4862b08d097e6ce910d0209f40862c00_NeikiAnalytics.dll

Resource

win7-20240508-en

ramnit banker spyware stealer trojan worm

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

4862b08d097e6ce910d0209f40862c00_NeikiAnalytics.dll

Resource

win10v2004-20240508-en

ramnit banker spyware stealer trojan worm

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  4862b08d097e6ce910d0209f40862c00_NeikiAnalytics.exe
- Size
  
  68KB
- MD5
  
  4862b08d097e6ce910d0209f40862c00
- SHA1
  
  d227aae9b114674dcdbe398868e338655306785a
- SHA256
  
  042c0ff8e658b9b9b86134cf0aecc96f95a37ab5c0c8b9ed935432d20b9a38c8
- SHA512
  
  478b0f87fc3df13431fad44d7d08bab7cdcc878feeb8e2734792873fab14dcf00afb724baa887439712aa8a6b0a104ed206e4265c4f26319f986f3bfec0cf7af
- SSDEEP
  
  1536:MLNd/Pk7btaoX7DypKr0wNIYIUSS9eyBX5Q0iZs3V:GNhY5aora80mIYI7i5QXs3
Score

10^/10

ramnit banker spyware stealer trojan worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanworm

behavioral2

ramnitbankerspywarestealertrojanworm

© 2018-2024

Terms | Privacy