Overview
overview
8Static
static
3ninjaripper171.7z
windows10-1703-x64
8ninjarippe...en.txt
windows10-1703-x64
1ninjarippe...ru.txt
windows10-1703-x64
1ninjarippe...mp.exe
windows10-1703-x64
3ninjarippe...ll.rar
windows10-1703-x64
3ninjarippe...ll.rar
windows10-1703-x64
3ninjarippe...mr.zip
windows10-1703-x64
1ninjarippe...l69.ms
windows10-1703-x64
3ninjarippe...1.3.ms
windows10-1703-x64
3ninjarippe...69.txt
windows10-1703-x64
1ninjarippe...er.zip
windows10-1703-x64
1ninjarippe...rip.py
windows10-1703-x64
3ninjarippe...ja.zip
windows10-1703-x64
1ninjarippe...ew.txt
windows10-1703-x64
1ninjarippe...er.exe
windows10-1703-x64
1ninjarippe...ap.dll
windows10-1703-x64
3ninjarippe...er.exe
windows10-1703-x64
1ninjarippe...er.dll
windows10-1703-x64
3ninjarippe...er.exe
windows10-1703-x64
1ninjarippe...ap.dll
windows10-1703-x64
3ninjarippe...8d.dll
windows10-1703-x64
3ninjarippe...er.exe
windows10-1703-x64
1ninjarippe...er.dll
windows10-1703-x64
3Analysis
-
max time kernel
404s -
max time network
1607s -
platform
windows10-1703_x64 -
resource
win10-20230220-en -
resource tags
arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system -
submitted
13/05/2023, 17:32
Static task
static1
Behavioral task
behavioral1
Sample
ninjaripper171.7z
Resource
win10-20230220-en
Behavioral task
behavioral2
Sample
ninjaripper1.7.1/help_en.txt
Resource
win10-20230220-en
Behavioral task
behavioral3
Sample
ninjaripper1.7.1/help_ru.txt
Resource
win10-20230220-en
Behavioral task
behavioral4
Sample
ninjaripper1.7.1/ripdump.exe
Resource
win10-20230220-en
Behavioral task
behavioral5
Sample
ninjaripper1.7.1/tools/3dmax_GIMS_importer/EvoGIMS_manualinstall.rar
Resource
win10-20230220-en
Behavioral task
behavioral6
Sample
ninjaripper1.7.1/tools/3dmax_GIMS_importer/EvoGIMS_webinstall.rar
Resource
win10-20230220-en
Behavioral task
behavioral7
Sample
ninjaripper1.7.1/tools/3dmax_GIMS_importer/nrImp_3Dmr.zip
Resource
win10-20230220-en
Behavioral task
behavioral8
Sample
ninjaripper1.7.1/tools/3dmax_maxscript_importer/ninja_importerb7_cl69.ms
Resource
win10-20230220-en
Behavioral task
behavioral9
Sample
ninjaripper1.7.1/tools/3dmax_maxscript_importer/ninja_ripper_1.3.ms
Resource
win10-20230220-en
Behavioral task
behavioral10
Sample
ninjaripper1.7.1/tools/3dmax_maxscript_importer/readme_for_ninja_importerb7_cl69.txt
Resource
win10-20230220-en
Behavioral task
behavioral11
Sample
ninjaripper1.7.1/tools/blender_ninjaripper_importer/blender-import-ninjaripper-master.zip
Resource
win10-20230220-en
Behavioral task
behavioral12
Sample
ninjaripper1.7.1/tools/noesis_importer/fmt_ninjaripper_rip.py
Resource
win10-20230220-en
Behavioral task
behavioral13
Sample
ninjaripper1.7.1/tools/noesis_importer/ninjaripper_noesis_modified_by_blackninja.zip
Resource
win10-20230220-en
Behavioral task
behavioral14
Sample
ninjaripper1.7.1/whats_new.txt
Resource
win10-20230220-en
Behavioral task
behavioral15
Sample
ninjaripper1.7.1/x64/NinjaRipper.exe
Resource
win10-20230220-en
Behavioral task
behavioral16
Sample
ninjaripper1.7.1/x64/d3dwrap.dll
Resource
win10-20230220-en
Behavioral task
behavioral17
Sample
ninjaripper1.7.1/x64/injhelper.exe
Resource
win10-20230220-en
Behavioral task
behavioral18
Sample
ninjaripper1.7.1/x64/intruder.dll
Resource
win10-20230220-en
Behavioral task
behavioral19
Sample
ninjaripper1.7.1/x86/NinjaRipper.exe
Resource
win10-20230220-en
Behavioral task
behavioral20
Sample
ninjaripper1.7.1/x86/d3dwrap.dll
Resource
win10-20230220-en
Behavioral task
behavioral21
Sample
ninjaripper1.7.1/x86/d3dx8d.dll
Resource
win10-20230220-en
Behavioral task
behavioral22
Sample
ninjaripper1.7.1/x86/injhelper.exe
Resource
win10-20230220-en
Behavioral task
behavioral23
Sample
ninjaripper1.7.1/x86/intruder.dll
Resource
win10-20230220-en
General
-
Target
ninjaripper1.7.1/tools/3dmax_maxscript_importer/readme_for_ninja_importerb7_cl69.txt
-
Size
879B
-
MD5
d36ecebc78095c664be107b2c7fbed40
-
SHA1
0f86a6333216d8a1dfb728cbf4feae819b681286
-
SHA256
c2918cafb234a5d866a745323da94f0532cf305d3d9a94bb465bd17d43545c4c
-
SHA512
64560018e3760855a976b493921584f9b710f507050292199806be0755180372552ba8ade1f83c0a6ca72e1a41e0d262abab0dc387d12fdd780b655097e61d54
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 656 NOTEPAD.EXE