Overview
overview
8Static
static
3ninjaripper171.7z
windows10-1703-x64
8ninjarippe...en.txt
windows10-1703-x64
1ninjarippe...ru.txt
windows10-1703-x64
1ninjarippe...mp.exe
windows10-1703-x64
3ninjarippe...ll.rar
windows10-1703-x64
3ninjarippe...ll.rar
windows10-1703-x64
3ninjarippe...mr.zip
windows10-1703-x64
1ninjarippe...l69.ms
windows10-1703-x64
3ninjarippe...1.3.ms
windows10-1703-x64
3ninjarippe...69.txt
windows10-1703-x64
1ninjarippe...er.zip
windows10-1703-x64
1ninjarippe...rip.py
windows10-1703-x64
3ninjarippe...ja.zip
windows10-1703-x64
1ninjarippe...ew.txt
windows10-1703-x64
1ninjarippe...er.exe
windows10-1703-x64
1ninjarippe...ap.dll
windows10-1703-x64
3ninjarippe...er.exe
windows10-1703-x64
1ninjarippe...er.dll
windows10-1703-x64
3ninjarippe...er.exe
windows10-1703-x64
1ninjarippe...ap.dll
windows10-1703-x64
3ninjarippe...8d.dll
windows10-1703-x64
3ninjarippe...er.exe
windows10-1703-x64
1ninjarippe...er.dll
windows10-1703-x64
3Analysis
-
max time kernel
378s -
max time network
1597s -
platform
windows10-1703_x64 -
resource
win10-20230220-en -
resource tags
arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system -
submitted
13/05/2023, 17:32
Static task
static1
Behavioral task
behavioral1
Sample
ninjaripper171.7z
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral2
Sample
ninjaripper1.7.1/help_en.txt
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral3
Sample
ninjaripper1.7.1/help_ru.txt
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral4
Sample
ninjaripper1.7.1/ripdump.exe
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral5
Sample
ninjaripper1.7.1/tools/3dmax_GIMS_importer/EvoGIMS_manualinstall.rar
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral6
Sample
ninjaripper1.7.1/tools/3dmax_GIMS_importer/EvoGIMS_webinstall.rar
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral7
Sample
ninjaripper1.7.1/tools/3dmax_GIMS_importer/nrImp_3Dmr.zip
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral8
Sample
ninjaripper1.7.1/tools/3dmax_maxscript_importer/ninja_importerb7_cl69.ms
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral9
Sample
ninjaripper1.7.1/tools/3dmax_maxscript_importer/ninja_ripper_1.3.ms
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral10
Sample
ninjaripper1.7.1/tools/3dmax_maxscript_importer/readme_for_ninja_importerb7_cl69.txt
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral11
Sample
ninjaripper1.7.1/tools/blender_ninjaripper_importer/blender-import-ninjaripper-master.zip
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral12
Sample
ninjaripper1.7.1/tools/noesis_importer/fmt_ninjaripper_rip.py
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral13
Sample
ninjaripper1.7.1/tools/noesis_importer/ninjaripper_noesis_modified_by_blackninja.zip
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral14
Sample
ninjaripper1.7.1/whats_new.txt
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral15
Sample
ninjaripper1.7.1/x64/NinjaRipper.exe
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral16
Sample
ninjaripper1.7.1/x64/d3dwrap.dll
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral17
Sample
ninjaripper1.7.1/x64/injhelper.exe
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral18
Sample
ninjaripper1.7.1/x64/intruder.dll
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral19
Sample
ninjaripper1.7.1/x86/NinjaRipper.exe
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral20
Sample
ninjaripper1.7.1/x86/d3dwrap.dll
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral21
Sample
ninjaripper1.7.1/x86/d3dx8d.dll
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral22
Sample
ninjaripper1.7.1/x86/injhelper.exe
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral23
Sample
ninjaripper1.7.1/x86/intruder.dll
Resource
win10-20230220-en
windows10-1703-x64
General
-
Target
ninjaripper1.7.1/x64/d3dwrap.dll
-
Size
154KB
-
MD5
5f2d762679a865b86821175306daa768
-
SHA1
36dcfb98abd00e2f7728d9cabab56d1ddd4a965d
-
SHA256
644f1535b71b7a61b16020c8feb3b5eb9d1ed53462f9f2fae858592b99693d7c
-
SHA512
6e3a06d10ea5ca6f6464abceb93ab5c4da02821d465b9ff667487535290c9c919306a725c476beb63845e853c4c200a017d01be8d754821dfc1c00a1de8b2365
-
SSDEEP
3072:95TE4DSGXBxJlTWqMDpDWmR7A4LZNwZm+1JGgct7:vTaaxJlT4pDn04tsJBch
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3652 4032 WerFault.exe 65 -
Suspicious behavior: EnumeratesProcesses 20 IoCs
pid Process 4032 rundll32.exe 4032 rundll32.exe 4032 rundll32.exe 4032 rundll32.exe 4032 rundll32.exe 4032 rundll32.exe 4032 rundll32.exe 4032 rundll32.exe 4032 rundll32.exe 4032 rundll32.exe 4032 rundll32.exe 4032 rundll32.exe 4032 rundll32.exe 4032 rundll32.exe 4032 rundll32.exe 4032 rundll32.exe 4032 rundll32.exe 4032 rundll32.exe 4032 rundll32.exe 4032 rundll32.exe