Overview

overview

10

Static

static

3

4a308eea5f...cs.dll

windows7-x64

10

4a308eea5f...cs.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a308eea5fad75b8907ec1b761641a514b19ee9470222ecbc608588b9d088655_NeikiAnalytics.exe

  • Size

    5.0MB

  • Sample

    240628-amwztatakk

  • MD5

    84c8a997a557c9b6d1b489f7b5912930

  • SHA1

    c9eeaa7e1c1e23949bcdba6e24255ae4baea48f0

  • SHA256

    4a308eea5fad75b8907ec1b761641a514b19ee9470222ecbc608588b9d088655

  • SHA512

    ae15dae96f4838e972b6673c5abe9b7ab4b8957cd398cdec3faaab84ecc3ca53b2fced26ce27c6323c60d39ff8955a87926effb446fd9955b5c1b684f97f5259

  • SSDEEP

    98304:1PvQgags6nAKrDrYqaGY3mr1XU9D7tnQHfjDE7ZC240Xp3lzvy46evYv2sGCv7r:1Qgags6nAKrDrYqaGY3mr1XU91QHfjDZ

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      4a308eea5fad75b8907ec1b761641a514b19ee9470222ecbc608588b9d088655_NeikiAnalytics.exe

    • Size

      5.0MB

    • MD5

      84c8a997a557c9b6d1b489f7b5912930

    • SHA1

      c9eeaa7e1c1e23949bcdba6e24255ae4baea48f0

    • SHA256

      4a308eea5fad75b8907ec1b761641a514b19ee9470222ecbc608588b9d088655

    • SHA512

      ae15dae96f4838e972b6673c5abe9b7ab4b8957cd398cdec3faaab84ecc3ca53b2fced26ce27c6323c60d39ff8955a87926effb446fd9955b5c1b684f97f5259

    • SSDEEP

      98304:1PvQgags6nAKrDrYqaGY3mr1XU9D7tnQHfjDE7ZC240Xp3lzvy46evYv2sGCv7r:1Qgags6nAKrDrYqaGY3mr1XU91QHfjDZ

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks