Overview
overview
8Static
static
3ninjaripper171.7z
windows10-1703-x64
8ninjarippe...en.txt
windows10-1703-x64
1ninjarippe...ru.txt
windows10-1703-x64
1ninjarippe...mp.exe
windows10-1703-x64
3ninjarippe...ll.rar
windows10-1703-x64
3ninjarippe...ll.rar
windows10-1703-x64
3ninjarippe...mr.zip
windows10-1703-x64
1ninjarippe...l69.ms
windows10-1703-x64
3ninjarippe...1.3.ms
windows10-1703-x64
3ninjarippe...69.txt
windows10-1703-x64
1ninjarippe...er.zip
windows10-1703-x64
1ninjarippe...rip.py
windows10-1703-x64
3ninjarippe...ja.zip
windows10-1703-x64
1ninjarippe...ew.txt
windows10-1703-x64
1ninjarippe...er.exe
windows10-1703-x64
1ninjarippe...ap.dll
windows10-1703-x64
3ninjarippe...er.exe
windows10-1703-x64
1ninjarippe...er.dll
windows10-1703-x64
3ninjarippe...er.exe
windows10-1703-x64
1ninjarippe...ap.dll
windows10-1703-x64
3ninjarippe...8d.dll
windows10-1703-x64
3ninjarippe...er.exe
windows10-1703-x64
1ninjarippe...er.dll
windows10-1703-x64
3Analysis
-
max time kernel
379s -
max time network
1589s -
platform
windows10-1703_x64 -
resource
win10-20230220-en -
resource tags
arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system -
submitted
13/05/2023, 17:32
Static task
static1
Behavioral task
behavioral1
Sample
ninjaripper171.7z
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral2
Sample
ninjaripper1.7.1/help_en.txt
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral3
Sample
ninjaripper1.7.1/help_ru.txt
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral4
Sample
ninjaripper1.7.1/ripdump.exe
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral5
Sample
ninjaripper1.7.1/tools/3dmax_GIMS_importer/EvoGIMS_manualinstall.rar
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral6
Sample
ninjaripper1.7.1/tools/3dmax_GIMS_importer/EvoGIMS_webinstall.rar
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral7
Sample
ninjaripper1.7.1/tools/3dmax_GIMS_importer/nrImp_3Dmr.zip
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral8
Sample
ninjaripper1.7.1/tools/3dmax_maxscript_importer/ninja_importerb7_cl69.ms
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral9
Sample
ninjaripper1.7.1/tools/3dmax_maxscript_importer/ninja_ripper_1.3.ms
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral10
Sample
ninjaripper1.7.1/tools/3dmax_maxscript_importer/readme_for_ninja_importerb7_cl69.txt
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral11
Sample
ninjaripper1.7.1/tools/blender_ninjaripper_importer/blender-import-ninjaripper-master.zip
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral12
Sample
ninjaripper1.7.1/tools/noesis_importer/fmt_ninjaripper_rip.py
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral13
Sample
ninjaripper1.7.1/tools/noesis_importer/ninjaripper_noesis_modified_by_blackninja.zip
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral14
Sample
ninjaripper1.7.1/whats_new.txt
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral15
Sample
ninjaripper1.7.1/x64/NinjaRipper.exe
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral16
Sample
ninjaripper1.7.1/x64/d3dwrap.dll
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral17
Sample
ninjaripper1.7.1/x64/injhelper.exe
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral18
Sample
ninjaripper1.7.1/x64/intruder.dll
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral19
Sample
ninjaripper1.7.1/x86/NinjaRipper.exe
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral20
Sample
ninjaripper1.7.1/x86/d3dwrap.dll
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral21
Sample
ninjaripper1.7.1/x86/d3dx8d.dll
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral22
Sample
ninjaripper1.7.1/x86/injhelper.exe
Resource
win10-20230220-en
windows10-1703-x64
Behavioral task
behavioral23
Sample
ninjaripper1.7.1/x86/intruder.dll
Resource
win10-20230220-en
windows10-1703-x64
General
-
Target
ninjaripper1.7.1/x64/intruder.dll
-
Size
1.0MB
-
MD5
dee02d7dd4b822ab1204c4e14f8cb5c8
-
SHA1
5d0a06da3e259d6849459932471c2563e9a60b17
-
SHA256
3aa424f235d3ca6919745c88441e52e5b948b090610b7d64246e19beef85a3f5
-
SHA512
03442288cc6ccd97dfb3c37fc493a3faef9bad3f433ec0afde24bde8b941ec3d08d097ac4cbb72f65c206069be209793a310f331d79d317ba6ea98a0de864402
-
SSDEEP
12288:rpAJ9VYtR33pcHpNqRGkJb7SYfag//7ZN3Vp:rk9VYtRHpcJNqIkJb7Vfag/tD
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4152 4036 WerFault.exe 65 -
Suspicious behavior: EnumeratesProcesses 32 IoCs
pid Process 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe 4036 rundll32.exe