60541e6a43661f0ee2e70c0a7cedb86d44a874e5376949db7a2e1f604fa5cdf1

Submit
Reports

Overview

overview

Static

static

ninjaripper171.7z

windows10-1703-x64

ninjarippe...en.txt

windows10-1703-x64

ninjarippe...ru.txt

windows10-1703-x64

ninjarippe...mp.exe

windows10-1703-x64

ninjarippe...ll.rar

windows10-1703-x64

ninjarippe...ll.rar

windows10-1703-x64

ninjarippe...mr.zip

windows10-1703-x64

ninjarippe...l69.ms

windows10-1703-x64

ninjarippe...1.3.ms

windows10-1703-x64

ninjarippe...69.txt

windows10-1703-x64

ninjarippe...er.zip

windows10-1703-x64

ninjarippe...rip.py

windows10-1703-x64

ninjarippe...ja.zip

windows10-1703-x64

ninjarippe...ew.txt

windows10-1703-x64

ninjarippe...er.exe

windows10-1703-x64

ninjarippe...ap.dll

windows10-1703-x64

ninjarippe...er.exe

windows10-1703-x64

ninjarippe...er.dll

windows10-1703-x64

ninjarippe...er.exe

windows10-1703-x64

ninjarippe...ap.dll

windows10-1703-x64

ninjarippe...8d.dll

windows10-1703-x64

ninjarippe...er.exe

windows10-1703-x64

ninjarippe...er.dll

windows10-1703-x64

Analysis

max time kernel
377s
max time network
1603s
platform
windows10-1703_x64
resource
win10-20230220-en
resource tags

arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
submitted
13-05-2023 17:32

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ninjaripper171.7z

Resource

win10-20230220-en

discovery persistence

windows10-1703-x64

19 signatures

1800 seconds

Behavioral task

behavioral2

Sample

ninjaripper1.7.1/help_en.txt

Resource

win10-20230220-en

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral3

Sample

ninjaripper1.7.1/help_ru.txt

Resource

win10-20230220-en

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral4

Sample

ninjaripper1.7.1/ripdump.exe

Resource

win10-20230220-en

windows10-1703-x64

4 signatures

1800 seconds

Behavioral task

behavioral5

Sample

ninjaripper1.7.1/tools/3dmax_GIMS_importer/EvoGIMS_manualinstall.rar

Resource

win10-20230220-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral6

Sample

ninjaripper1.7.1/tools/3dmax_GIMS_importer/EvoGIMS_webinstall.rar

Resource

win10-20230220-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral7

Sample

ninjaripper1.7.1/tools/3dmax_GIMS_importer/nrImp_3Dmr.zip

Resource

win10-20230220-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral8

Sample

ninjaripper1.7.1/tools/3dmax_maxscript_importer/ninja_importerb7_cl69.ms

Resource

win10-20230220-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral9

Sample

ninjaripper1.7.1/tools/3dmax_maxscript_importer/ninja_ripper_1.3.ms

Resource

win10-20230220-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral10

Sample

ninjaripper1.7.1/tools/3dmax_maxscript_importer/readme_for_ninja_importerb7_cl69.txt

Resource

win10-20230220-en

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral11

Sample

ninjaripper1.7.1/tools/blender_ninjaripper_importer/blender-import-ninjaripper-master.zip

Resource

win10-20230220-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral12

Sample

ninjaripper1.7.1/tools/noesis_importer/fmt_ninjaripper_rip.py

Resource

win10-20230220-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral13

Sample

ninjaripper1.7.1/tools/noesis_importer/ninjaripper_noesis_modified_by_blackninja.zip

Resource

win10-20230220-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral14

Sample

ninjaripper1.7.1/whats_new.txt

Resource

win10-20230220-en

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral15

Sample

ninjaripper1.7.1/x64/NinjaRipper.exe

Resource

win10-20230220-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral16

Sample

ninjaripper1.7.1/x64/d3dwrap.dll

Resource

win10-20230220-en

windows10-1703-x64

2 signatures

1800 seconds

Behavioral task

behavioral17

Sample

ninjaripper1.7.1/x64/injhelper.exe

Resource

win10-20230220-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral18

Sample

ninjaripper1.7.1/x64/intruder.dll

Resource

win10-20230220-en

windows10-1703-x64

2 signatures

1800 seconds

Behavioral task

behavioral19

Sample

ninjaripper1.7.1/x86/NinjaRipper.exe

Resource

win10-20230220-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral20

Sample

ninjaripper1.7.1/x86/d3dwrap.dll

Resource

win10-20230220-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral21

Sample

ninjaripper1.7.1/x86/d3dx8d.dll

Resource

win10-20230220-en

windows10-1703-x64

2 signatures

1800 seconds

Behavioral task

behavioral22

Sample

ninjaripper1.7.1/x86/injhelper.exe

Resource

win10-20230220-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral23

Sample

ninjaripper1.7.1/x86/intruder.dll

Resource

win10-20230220-en

windows10-1703-x64

3 signatures

1800 seconds

Report Analysis Logs

General

Target

ninjaripper1.7.1/whats_new.txt
Size

795B
MD5

d62001d7627c75686d4bddb5ed7bef42
SHA1

4ed05a034badcc3e92c72234abd6a9910d19d0ee
SHA256

8e4c1774ee9d6c5b008f512368c69911fdd80e5c90a622d4d5595ca7ff4fe8d0
SHA512

9edbdaca05ed535338669af162168ca6a0e8a61196616b3c6972eeb7f41d23595dce3c7ca67065c45184b2ef041008c5727472b6b1e41490d342389ae52508e1

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
3096	NOTEPAD.EXE

Processes

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\ninjaripper1.7.1\whats_new.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3096

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads