ramnit | 6b2de25a7b639d59cfd168474218d5b71256e02fe8557a525d18c1a15e42adbc | Triage

Submit
Reports

Overview

overview

Static

static

93190f7f73...cs.dll

windows7-x64

93190f7f73...cs.dll

windows10-2004-x64

Sharing

General

Target

93190f7f739937ff6b61041f69e3c680_NeikiAnalytics.exe
Size

39KB
Sample

240601-jkm4kafb88
MD5

93190f7f739937ff6b61041f69e3c680
SHA1

24b716246e5ff40d769e0017ffd4f4878e96e7c8
SHA256

6b2de25a7b639d59cfd168474218d5b71256e02fe8557a525d18c1a15e42adbc
SHA512

65a10cac977fef53aede47469163b38a3c647513287627a3c044fcf8cc564bb5b35dc274577e900d25326b5259813f6d1386bc9ea78b9b1fb632c032cb2a30d8
SSDEEP

768:Bs+RgMsmiIDftyPP+1H17jIydwYrlRm5TrTJyCO6zsMm5nnv1+Vn:WkiIDftyEhzm5TrTQ/FdZnvAl

Score

10^/10

ramnit banker spyware stealer trojan worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

93190f7f739937ff6b61041f69e3c680_NeikiAnalytics.dll

Resource

win7-20240215-en

ramnit banker spyware stealer trojan worm

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

93190f7f739937ff6b61041f69e3c680_NeikiAnalytics.dll

Resource

win10v2004-20240508-en

ramnit banker spyware stealer trojan worm

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  93190f7f739937ff6b61041f69e3c680_NeikiAnalytics.exe
- Size
  
  39KB
- MD5
  
  93190f7f739937ff6b61041f69e3c680
- SHA1
  
  24b716246e5ff40d769e0017ffd4f4878e96e7c8
- SHA256
  
  6b2de25a7b639d59cfd168474218d5b71256e02fe8557a525d18c1a15e42adbc
- SHA512
  
  65a10cac977fef53aede47469163b38a3c647513287627a3c044fcf8cc564bb5b35dc274577e900d25326b5259813f6d1386bc9ea78b9b1fb632c032cb2a30d8
- SSDEEP
  
  768:Bs+RgMsmiIDftyPP+1H17jIydwYrlRm5TrTJyCO6zsMm5nnv1+Vn:WkiIDftyEhzm5TrTQ/FdZnvAl
Score

10^/10

ramnit banker spyware stealer trojan worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanworm

behavioral2

ramnitbankerspywarestealertrojanworm

© 2018-2024

Terms | Privacy