ramnit | 66d7316c33dcfaadad2fd2736067541629d84b696a8d7ccdfd4179c30a24ea64 | Triage

Submit
Reports

Overview

overview

Static

static

89ca7bfeb2...cs.dll

windows7-x64

5

89ca7bfeb2...cs.dll

windows10-2004-x64

Sharing

General

Target

89ca7bfeb262973a89cd51884d03def0_NeikiAnalytics.exe
Size

38KB
Sample

240601-csxjmsfc46
MD5

89ca7bfeb262973a89cd51884d03def0
SHA1

1e7717983da8a8b371184eb329c72d049439fa28
SHA256

66d7316c33dcfaadad2fd2736067541629d84b696a8d7ccdfd4179c30a24ea64
SHA512

08fa051a030f086f451eb1042b49daae1b3ae417c20c7e3fb24600284f4333780cd346a6c2897428a312a9173ebfaa5258a58f3587133b0b0a197f8512d9d392
SSDEEP

768:Bs+/gMsLIn/wIj2labk+1IsceGSnkmJ0Yblr583CJrVV7aIXU76m2suBVV:WD8w22laSR0V+3CJrVxXczJu

Score

10^/10

ramnit banker spyware stealer trojan worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

89ca7bfeb262973a89cd51884d03def0_NeikiAnalytics.dll

Resource

win7-20240220-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

89ca7bfeb262973a89cd51884d03def0_NeikiAnalytics.dll

Resource

win10v2004-20240426-en

ramnit banker spyware stealer trojan worm

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  89ca7bfeb262973a89cd51884d03def0_NeikiAnalytics.exe
- Size
  
  38KB
- MD5
  
  89ca7bfeb262973a89cd51884d03def0
- SHA1
  
  1e7717983da8a8b371184eb329c72d049439fa28
- SHA256
  
  66d7316c33dcfaadad2fd2736067541629d84b696a8d7ccdfd4179c30a24ea64
- SHA512
  
  08fa051a030f086f451eb1042b49daae1b3ae417c20c7e3fb24600284f4333780cd346a6c2897428a312a9173ebfaa5258a58f3587133b0b0a197f8512d9d392
- SSDEEP
  
  768:Bs+/gMsLIn/wIj2labk+1IsceGSnkmJ0Yblr583CJrVV7aIXU76m2suBVV:WD8w22laSR0V+3CJrVxXczJu
Score

10^/10

ramnit banker spyware stealer trojan worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

ramnitbankerspywarestealertrojanworm

© 2018-2024

Terms | Privacy