Overview

overview

7

Static

static

3

NLBrute 1....en.zip

windows7-x64

1

NLBrute 1....en.zip

windows10-2004-x64

1

NLBrute 1....en.exe

windows7-x64

5

NLBrute 1....en.exe

windows10-2004-x64

5

NLBrute 1....64.exe

windows7-x64

5

NLBrute 1....64.exe

windows10-2004-x64

5

NLBrute 1....32.dll

windows7-x64

1

NLBrute 1....32.dll

windows10-2004-x64

1

masScan_1.6/Input.txt

windows7-x64

1

masScan_1.6/Input.txt

windows10-2004-x64

5

masScan_1....UI.exe

windows7-x64

1

masScan_1....UI.exe

windows10-2004-x64

1

masScan_1....et.dll

windows7-x64

1

masScan_1....et.dll

windows10-2004-x64

1

masScan_1...._3.exe

windows7-x64

7

masScan_1...._3.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.ini

windows7-x64

1

$PLUGINSDI...ns.ini

windows10-2004-x64

1

$PLUGINSDI...al.ini

windows7-x64

1

$PLUGINSDI...al.ini

windows10-2004-x64

1

$PLUGINSDI...er.bmp

windows7-x64

3

$PLUGINSDI...er.bmp

windows10-2004-x64

7

$PLUGINSDI...rd.bmp

windows7-x64

3

$PLUGINSDI...rd.bmp

windows10-2004-x64

7

$SYSDIR/Packet.dll

windows7-x64

1

$SYSDIR/Packet.dll

windows10-2004-x64

1

$SYSDIR/pthreadVC.dll

windows7-x64

1

$SYSDIR/pthreadVC.dll

windows10-2004-x64

1

$SYSDIR/wpcap.dll

windows7-x64

1

$SYSDIR/wpcap.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    20-02-2024 09:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    masScan_1.6/Input.txt

  • Size

    19KB

  • MD5

    6c77eedee0cf48fdefee2707f2e97f7a

  • SHA1

    bce4777c80eb763c1b0cef8fd4031226696a9c06

  • SHA256

    9216dd042d38d56980c78e65754d7e07e5dfd36aaabb712fe5c0f7487b97d445

  • SHA512

    3f60f72a11e0924baf3e7a0c31e62f7ec6b646d131936effd04be922249f0ba43faa52a30b5b92cec8c7405b4f6a49887c737e1bbd115187818e235fcc8d9718

  • SSDEEP

    192:9+pNQRVMKgpxCuHS6x8U2tmSlhHQgVW2y5lYPE2t+CKoi5G:9+pN8OKgpx7SQ8hQSlhHkME2t+Cvi5G

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\masScan_1.6\Input.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:2128

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads