Overview

overview

9

Static

static

9

bin64/intruder.dll

windows7-x64

1

bin64/intruder.dll

windows10-2004-x64

1

bin64/libeay32.dll

windows7-x64

1

bin64/libeay32.dll

windows10-2004-x64

1

bin64/plat...ws.dll

windows7-x64

1

bin64/plat...ws.dll

windows10-2004-x64

1

bin64/ssleay32.dll

windows7-x64

1

bin64/ssleay32.dll

windows10-2004-x64

1

bin64/wrap...11.dll

windows7-x64

1

bin64/wrap...11.dll

windows10-2004-x64

1

bin64/wrap...d8.dll

windows7-x64

1

bin64/wrap...d8.dll

windows10-2004-x64

1

bin64/wrap...d9.dll

windows7-x64

1

bin64/wrap...d9.dll

windows10-2004-x64

1

bin64/wrap...aw.dll

windows7-x64

1

bin64/wrap...aw.dll

windows10-2004-x64

1

external/d...de.dll

windows7-x64

1

external/d...de.dll

windows10-2004-x64

1

external/d...2x.dll

windows7-x64

1

external/d...2x.dll

windows10-2004-x64

1

external/d...3x.dll

windows7-x64

1

external/d...3x.dll

windows10-2004-x64

1

external/d...de.dll

windows7-x64

1

external/d...de.dll

windows10-2004-x64

1

external/d...2x.dll

windows7-x64

1

external/d...2x.dll

windows10-2004-x64

1

external/d...3x.dll

windows7-x64

1

external/d...3x.dll

windows10-2004-x64

1

external/d...de.dll

windows7-x64

1

external/d...de.dll

windows10-2004-x64

1

external/d...2x.dll

windows7-x64

1

external/d...2x.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Ninja Ripper 2.0.5 beta.portable.zip

  • Size

    27.3MB

  • Sample

    230202-eyf5ysgg8v

  • MD5

    1b5ca3dad70fa32e0df7345256fb4108

  • SHA1

    3db84895c1affc61a24051354ab37fb6c01fd60d

  • SHA256

    145fcc8cd93c6c238c1529968588cdbe9ec071c272d1f86e2f3972dc27f9d705

  • SHA512

    36db4f61c26e5fdadd13062bcd14429cd35fb22fbcc9104cafaa0c1d7521f9fbffab6b5c33c371737b331f59f8674a953b571bfff42e2ab8647ae40d60714038

  • SSDEEP

    786432:J8O0EBBh8sZbF8JJKVyz4st+9xXOxtcxbQnpTiBf:JKsr86biwW4waxXN0TiV

Score
9/10

Malware Config

Targets

    • Target

      bin64/intruder.dll

    • Size

      6.0MB

    • MD5

      9dd11db1c5734caa0d3d9115f082f6f8

    • SHA1

      7b68a50aca0c56f32645236510657176abf1075d

    • SHA256

      3dd5c8391cb20ead924a5146894563bc613c327ecaac03ba3de53b8061d712a5

    • SHA512

      106da7eac938c96727327517a2cb3af47e8152c2817d9011abb8ef03b16ef0668db28649a43cf9d23e308b60360f886f5612b774e4681ebf798cff1dab0267e4

    • SSDEEP

      49152:2jqNpaQylATckuEFpnmDltVokJ6tXi5t0v4TkP+ANIjhZOIHpnlB/c5KgGRqhuTP:tldn6osNsvlDwIaKKgs/PX

    Score
    1/10
    behavioral1behavioral2

    • Target

      bin64/libeay32.dll

    • Size

      2.2MB

    • MD5

      17b7b7a84812ec0d340bf64c84703dd4

    • SHA1

      b0f9021caa71f1fe17a399ab425f49a63f3d9fd3

    • SHA256

      19396b3fd3458ace580054156b2f257f1687907427def44321f5e989aef4b14a

    • SHA512

      f794226df67983da61c1a4746616040e347f6e28ce2f1a94601955485b0f1d8a5ac63d9248ee6dcc95c0b51f3f24c379ca83479173b543d9e185ac635b0c5238

    • SSDEEP

      49152:Bv/mZPGtlqCNVwASOcrF3D5cxoqCgSsHg6jTELoCNIU6i1lNHCz6qKfopPd:9WBRqCWxjQLS+vNHCz6qKfov

    Score
    1/10
    behavioral3behavioral4

    • Target

      bin64/platforms/qwindows.dll

    • Size

      1.4MB

    • MD5

      61799973f397f2a5f9a1b80a4f4a64c3

    • SHA1

      09e417682e7f56e2570fb9563a4aa08bc9486170

    • SHA256

      c85d46debb233f8aaebf357d62c23bfbca50b113b291092d1deb2bbf4177ba70

    • SHA512

      7cac8f51c83dcfd8e083a84eb12d72a9b8c61b3321764fbde0299228d9821c254cdec82556e5c23b15a0dba451b8cb22c724d4331e3ea8f930f2352ca4a28fe6

    • SSDEEP

      24576:6wb5omZRaYm2u1qGy7DjMnts5QxuoLep4YrlNSrQZeh5:6knZRaYm2Oq/rMntsxo6p4Yr3SD

    Score
    1/10
    behavioral5behavioral6

    • Target

      bin64/ssleay32.dll

    • Size

      379KB

    • MD5

      62d59eed13bf47ca2ba38075bfb55cef

    • SHA1

      d881686b061f7dd48197206b1bab8479157ca629

    • SHA256

      375bc083b93aba3fdd995a942c3967d2cfaecffe2c1e5ddcad29cc7e94e78339

    • SHA512

      29bb6bf1e028dbaeb178c32ddee49014ca1d52dc63841d87c5547517d55383e1c9015dc91e8fb710fb84401b42bda137a50137ab9f721a15adf15b5c9b30e724

    • SSDEEP

      6144:lwpXWDY0sc+cnRBOQuBWy3w/OFTuevUeP23rXES8fuL6V1aY/sK1DyZVhL47NCci:lwUY0j+cnRBOQuBWy3w/OFTuevUQ23rF

    Score
    1/10
    behavioral7behavioral8

    • Target

      bin64/wrapper/d3d11.dll

    • Size

      176KB

    • MD5

      72cb2c31df7d047cfc8f6eda6fc99f5a

    • SHA1

      d036d227bc72786deaf82e9c82e043960e6a3ffb

    • SHA256

      cd80055145ca250dabb0ad3d3586a00f76866c7cebcecfb877c6d8cf4a041c08

    • SHA512

      a06eaf3d61fa3e881eb43dd4b4fd6e4a5a21ddd117af2b1f76cf549eaae2e663104c2c9d2f2d78a6610063b7552b77d8ca7feb5659dc1dffa6153a2b566dcc86

    • SSDEEP

      3072:I0Sjt2ut+tmRRaslo6gvBSTc7TtZGXdTKYe:IlgmOslGgUTX

    Score
    1/10
    behavioral10behavioral9

    • Target

      bin64/wrapper/d3d8.dll

    • Size

      176KB

    • MD5

      72cb2c31df7d047cfc8f6eda6fc99f5a

    • SHA1

      d036d227bc72786deaf82e9c82e043960e6a3ffb

    • SHA256

      cd80055145ca250dabb0ad3d3586a00f76866c7cebcecfb877c6d8cf4a041c08

    • SHA512

      a06eaf3d61fa3e881eb43dd4b4fd6e4a5a21ddd117af2b1f76cf549eaae2e663104c2c9d2f2d78a6610063b7552b77d8ca7feb5659dc1dffa6153a2b566dcc86

    • SSDEEP

      3072:I0Sjt2ut+tmRRaslo6gvBSTc7TtZGXdTKYe:IlgmOslGgUTX

    Score
    1/10
    behavioral11behavioral12

    • Target

      bin64/wrapper/d3d9.dll

    • Size

      176KB

    • MD5

      72cb2c31df7d047cfc8f6eda6fc99f5a

    • SHA1

      d036d227bc72786deaf82e9c82e043960e6a3ffb

    • SHA256

      cd80055145ca250dabb0ad3d3586a00f76866c7cebcecfb877c6d8cf4a041c08

    • SHA512

      a06eaf3d61fa3e881eb43dd4b4fd6e4a5a21ddd117af2b1f76cf549eaae2e663104c2c9d2f2d78a6610063b7552b77d8ca7feb5659dc1dffa6153a2b566dcc86

    • SSDEEP

      3072:I0Sjt2ut+tmRRaslo6gvBSTc7TtZGXdTKYe:IlgmOslGgUTX

    Score
    1/10
    behavioral13behavioral14

    • Target

      bin64/wrapper/ddraw.dll

    • Size

      176KB

    • MD5

      72cb2c31df7d047cfc8f6eda6fc99f5a

    • SHA1

      d036d227bc72786deaf82e9c82e043960e6a3ffb

    • SHA256

      cd80055145ca250dabb0ad3d3586a00f76866c7cebcecfb877c6d8cf4a041c08

    • SHA512

      a06eaf3d61fa3e881eb43dd4b4fd6e4a5a21ddd117af2b1f76cf549eaae2e663104c2c9d2f2d78a6610063b7552b77d8ca7feb5659dc1dffa6153a2b566dcc86

    • SSDEEP

      3072:I0Sjt2ut+tmRRaslo6gvBSTc7TtZGXdTKYe:IlgmOslGgUTX

    Score
    1/10
    behavioral15behavioral16

    • Target

      external/dgVoodoo2/3Dfx/arm64/Glide.dll

    • Size

      898KB

    • MD5

      af4ff3b18648e1e10e7f221c3dba9ca1

    • SHA1

      6ceed31e97c485574971398d60a66dc23d419cbc

    • SHA256

      56ef64808aea8b4ccebfeca596bb19b7d152b0f801fd3c0a75f0533b3683d50f

    • SHA512

      320d192822ff289f5f69e681417258babc74a81217d7e8bf6bb01b2cf1ef4b2c7aa62cca6cb217a74c8499adfb70295edb14ba57d69eee5241d0f11180e7aef1

    • SSDEEP

      12288:KoQB3dB/H8lutp1hCJrBUo1KEYaQtFho:C3dB/8QtEKmiFho

    Score
    1/10
    behavioral17behavioral18

    • Target

      external/dgVoodoo2/3Dfx/arm64/Glide2x.dll

    • Size

      897KB

    • MD5

      f7bc88eae15c4f28e636869804df09cf

    • SHA1

      d0d7e2fe6a17401e51453b8d2b2ce1104a64bfa9

    • SHA256

      d9803918f9bc7c9f60fa23d0fba0372290f9b88f2d35f76af2c8719f6d222ac9

    • SHA512

      fc0f06ae94a16df971b9e7dade437db643e5be988d0d61fba173907670cf1e019533a02474a65c77848a00ace72a555887105db9b60d0f41b0ceb9c6b552da63

    • SSDEEP

      12288:jtoBR3dBCH8g3sx1KKHmIiojsy54RQfo:e3dBY8+szzPfo

    Score
    1/10
    behavioral19behavioral20

    • Target

      external/dgVoodoo2/3Dfx/arm64/Glide3x.dll

    • Size

      911KB

    • MD5

      a8a7a8cca24e92a1921a011b99a3722d

    • SHA1

      155a5d95aac558c0de45b968c2f63a3e0977e3ea

    • SHA256

      b2f588963a040b4bf2d7d065243d2fb36d0056859b63bff4b89e0a95e0d461a6

    • SHA512

      ec6dc6c5b840aed48dbc5656bc25ffed468f2c83e899e0a1000e02b7d1be61ece516694e827252f4696c0ac59d87f4f91b6ec69f8913066e9e93346aa4255338

    • SSDEEP

      6144:wqhopvu9a9dP+pnO84GUbWRugg3XCx0sN1VtB9o7jsk38pLOlKxgmXGwNuqVFP4E:vGvuYdP+lr32M1VtB2uTgmX9dF/UItZ

    Score
    1/10
    behavioral21behavioral22

    • Target

      external/dgVoodoo2/3Dfx/x64/Glide.dll

    • Size

      228KB

    • MD5

      933e2f1a86de223d9f2ece38231b4029

    • SHA1

      484eb681a5490c69fc81c3aaf9c4ff10ca054916

    • SHA256

      c91cc7abb17c22956c4bb793a3ea5508c49e93a53decb0b3df29abaf6fdf76ea

    • SHA512

      6e77e1637b8afd0d7898ab6a97c3b9c9f5296e006b85ea65f94938f9ed83d96a7982527132f2e5c97becfef861cda09a8d818919ae931cfef54933238990240a

    • SSDEEP

      6144:KoBEphcEHSC8mM5/qNKqnFlO3k27AUUDRojKsHW:ZEphZHmR5CNDFo3k3UUloOO

    Score
    1/10
    behavioral23behavioral24

    • Target

      external/dgVoodoo2/3Dfx/x64/Glide2x.dll

    • Size

      227KB

    • MD5

      b066340b9fc937fd39117bfcdd660f32

    • SHA1

      0300f95806b2a80cc8e00be96ae3dea41ab2ca43

    • SHA256

      0a36c2c57a583aa2274bf050f67093668c0620dd11b96a06f62187a5bd289ec7

    • SHA512

      091f57c86ff49f67f28ea05ba4e9007c39eb6a962c575cdc6fb6ce6969d62a289f905b6575338f6bdc3ca7de0b8b432e163da8884cd1502f18b3090c8ffb416d

    • SSDEEP

      6144:eERWQQDFC3ir1euINOZB7ZikBKxF13HXnf6Vt:9RWQQRCe15IwhifxFVHXf

    Score
    1/10
    behavioral25behavioral26

    • Target

      external/dgVoodoo2/3Dfx/x64/Glide3x.dll

    • Size

      231KB

    • MD5

      41c1b208b37eafcbb590b93406d19a16

    • SHA1

      8fdf93259105a53c7d51d25f237377f3c7122f0b

    • SHA256

      532bafea2c18a9799928db2cbd0e2facbd5449aed3ea7a816ac9420b84441c51

    • SHA512

      67414b495e666509921f21f3330c97a014548d43c4c5d4f07f84d71e5b9ef4dd918003b6810f0270ad801cd0e335fe470662ee9ed8fce11afd825311ac8e94a0

    • SSDEEP

      6144:gMlN7kdVARithYiDk3bxHy7hvK0sEfsCGuDeB2:pN7koMledHy7ZKG1i

    Score
    1/10
    behavioral27behavioral28

    • Target

      external/dgVoodoo2/3Dfx/x86/Glide.dll

    • Size

      190KB

    • MD5

      245c8c263ea826d89ffc0664dae0f193

    • SHA1

      d1c8077c0e9946143fe530250111d9fd485ffab0

    • SHA256

      01d0d84ce9efca480d0272810133ac9e5742770fd794dd69858279ff9e65df59

    • SHA512

      df3fb1656057724f99346aec25492ac325e0bdcc43a34cba7c04ff77ba6e67244fdf13fd4f4f7c60ed7ddd4fef3c1026b61108394df466740249042048434bac

    • SSDEEP

      3072:PFokdCFqIoofVLeay00z9eTBa7zBXW7suFwaeUO7k4Soo4Tu8epk6y3jkR9hRekr:dXLIoofReV0c90BigFwEohgIBeCHjoR3

    Score
    1/10
    behavioral29behavioral30

    • Target

      external/dgVoodoo2/3Dfx/x86/Glide2x.dll

    • Size

      190KB

    • MD5

      5ee5eae3f97d2b8449566b386e836d89

    • SHA1

      1fe81364be20ca34dd031a9f4705107bb7a996bd

    • SHA256

      13c3b025350332199503dd1585f76a7802d260e60b2b173264c0418482e06387

    • SHA512

      24b28757a15132b713c5e41cc1ba520925645e43eaa4e15e59bda5d330efba4f9adeb9ca1d4281979c10ef9e91fe8183771aafa692b24abf2785a099748e818e

    • SSDEEP

      3072:Mi56WOy7uQwZHMV47VgOkuDhd0/XsQQ3A3tCtJNGUpFTIctpTDMHLvk9SlAjOUlj:UWO3RHMgVzd0P/IA3tlUDTRxMHLXijOy

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks