ramnit | dad9b7a81fe37c431e9677eea9077e674e0ce2ee1e1d6e6b84e1d01a474bbc2d | Triage

Submit
Reports

Overview

overview

Static

static

4993223aaf...cs.dll

windows7-x64

4993223aaf...cs.dll

windows10-2004-x64

Sharing

General

Target

4993223aaf296fa6c1fb8cee20dcc830_NeikiAnalytics.exe
Size

68KB
Sample

240529-hsab1afb38
MD5

4993223aaf296fa6c1fb8cee20dcc830
SHA1

1c5ca7aa1971679543d039a513387b6447b2f28e
SHA256

dad9b7a81fe37c431e9677eea9077e674e0ce2ee1e1d6e6b84e1d01a474bbc2d
SHA512

2b1b37e682f57219080f05d02860e61fb3bd4610dc5119f502b0d9b8e06d7fabad6e696c9483e4f9e345eac0c1738236b5cb3da292fab7e9e7641b6cb351c287
SSDEEP

1536:MLNd/Pk7btaoX7DypKr0wN7YIUSS9eyBuy0iZs3X:GNhY5aora80m7YI7hyXs3

Score

10^/10

ramnit banker spyware stealer trojan worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

4993223aaf296fa6c1fb8cee20dcc830_NeikiAnalytics.dll

Resource

win7-20240221-en

ramnit banker spyware stealer trojan worm

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

4993223aaf296fa6c1fb8cee20dcc830_NeikiAnalytics.dll

Resource

win10v2004-20240226-en

ramnit banker spyware stealer trojan worm

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  4993223aaf296fa6c1fb8cee20dcc830_NeikiAnalytics.exe
- Size
  
  68KB
- MD5
  
  4993223aaf296fa6c1fb8cee20dcc830
- SHA1
  
  1c5ca7aa1971679543d039a513387b6447b2f28e
- SHA256
  
  dad9b7a81fe37c431e9677eea9077e674e0ce2ee1e1d6e6b84e1d01a474bbc2d
- SHA512
  
  2b1b37e682f57219080f05d02860e61fb3bd4610dc5119f502b0d9b8e06d7fabad6e696c9483e4f9e345eac0c1738236b5cb3da292fab7e9e7641b6cb351c287
- SSDEEP
  
  1536:MLNd/Pk7btaoX7DypKr0wN7YIUSS9eyBuy0iZs3X:GNhY5aora80m7YI7hyXs3
Score

10^/10

ramnit banker spyware stealer trojan worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanworm

behavioral2

ramnitbankerspywarestealertrojanworm

© 2018-2024

Terms | Privacy