ramnit | 3b27c20658498696ca570d00362cfcec6fb17bf05dbbf972ddbafc14d723b573 | Triage

Submit
Reports

Overview

overview

Static

static

974cf643a5...cs.dll

windows7-x64

974cf643a5...cs.dll

windows10-2004-x64

Sharing

General

Target

974cf643a561eca21aac5cae9db09cc0_NeikiAnalytics.exe
Size

67KB
Sample

240603-b8xc5sfa6s
MD5

974cf643a561eca21aac5cae9db09cc0
SHA1

c831fec9a663131ecbb73e28d87d326fd67ad0fb
SHA256

3b27c20658498696ca570d00362cfcec6fb17bf05dbbf972ddbafc14d723b573
SHA512

d15641fef456b5a28eac4fcb6bf4743ba59ea1ca84953108bb2c623ebfaccb6e94ff4c46f4ea82bb12b10cdc2efd7479a241ed8b0fe18c46cb46682c0c4de6bc
SSDEEP

1536:GJ4UwPZgpoc1wzruMECYCB+2H0eQ8X0iZs3:GOx+poHHuDCYCBFXXs3

Score

10^/10

ramnit banker spyware stealer trojan worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

974cf643a561eca21aac5cae9db09cc0_NeikiAnalytics.dll

Resource

win7-20240508-en

ramnit banker spyware stealer trojan worm

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

974cf643a561eca21aac5cae9db09cc0_NeikiAnalytics.dll

Resource

win10v2004-20240508-en

ramnit banker spyware stealer trojan worm

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  974cf643a561eca21aac5cae9db09cc0_NeikiAnalytics.exe
- Size
  
  67KB
- MD5
  
  974cf643a561eca21aac5cae9db09cc0
- SHA1
  
  c831fec9a663131ecbb73e28d87d326fd67ad0fb
- SHA256
  
  3b27c20658498696ca570d00362cfcec6fb17bf05dbbf972ddbafc14d723b573
- SHA512
  
  d15641fef456b5a28eac4fcb6bf4743ba59ea1ca84953108bb2c623ebfaccb6e94ff4c46f4ea82bb12b10cdc2efd7479a241ed8b0fe18c46cb46682c0c4de6bc
- SSDEEP
  
  1536:GJ4UwPZgpoc1wzruMECYCB+2H0eQ8X0iZs3:GOx+poHHuDCYCBFXXs3
Score

10^/10

ramnit banker spyware stealer trojan worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

ramnitbankerspywarestealertrojanworm

behavioral2

ramnitbankerspywarestealertrojanworm

© 2018-2024

Terms | Privacy