General

  • Target

    New folder.zip

  • Size

    25.2MB

  • Sample

    240430-3ekwsscc48

  • MD5

    a98e090943ba910893a3232d6475b624

  • SHA1

    cc1400d0a04e7b5201b9e0755905bf55105ef8a5

  • SHA256

    165dc77e3be202356a9ce9b36aad48a0d084236c3a85d99b10f37f147d44a068

  • SHA512

    21f4cb32e112581e5efd7a4289d6487f13dd606eff91e2d41e9962e262602ae690e05a51ce6f9dce4d012c1b37a13fafd035a5068f4695e38df360d645caf522

  • SSDEEP

    786432:QQmB0FCTXIF6Ns5Xlk4+9vXue0PVO/Y5ThYnl17gZQ:QQjFCzI6Ns5Xlkx92eoO+ThYlEQ

Score
4/10

Malware Config

Targets

    • Target

      DDoS-Ripper Pro/DRipper.py

    • Size

      47KB

    • MD5

      836fb4703be19909e41c9b5f8db4b357

    • SHA1

      b99ef3621d34d01597c4ebeda84a08584f630068

    • SHA256

      2f8ffe7521b02a75326cbd70a1783294809fb0c6e3f6a02af72bdc86bf1d7b36

    • SHA512

      b941cfa9519f9b021bffc67499ce9552015c72dcf2511b6d5500dc495e63e028fc3de9990ef17e842e0705f338d1520ab76ddac3c674641800b6a7eafaba0bec

    • SSDEEP

      768:0H91otr8AvZxM6DoFUD6iNUTRUvbV8M3s30MoT3ECBY5jZIJZGmwKS:0HDO/6UD6iNYRQJ8Mc30plY5mJwmc

    Score
    3/10
    • Target

      DDoS-Ripper Pro/pytransform/__init__.py

    • Size

      12KB

    • MD5

      ad549846d2ee1fdf93ee1d5f52cc8401

    • SHA1

      dc8653cd3502b99b00b04de613861b4ede2bc846

    • SHA256

      4207a171269b22a0b2eb75f7fab0b2912d9da63453d43cce9a7d808730934a1a

    • SHA512

      c12f36fd9a89c7b0c46e3b47b262f7bbae63f3b7e38db4e8642f9258823678f0afff49b493fa707ef2688b409e6333749b438d33c0996e4fca31c7fc38612252

    • SSDEEP

      192:sIRqXEqbHCTMRNhvyRW3Tt3JbtZeFRuJ0X9d1X2wiQvrT7k/aJdlGbc8/SXRl3RJ:sF3Fyu8FJYEjlh8c

    Score
    3/10
    • Target

      DDoS-Ripper Pro/pytransform/__pycache__/__init__.cpython-38.pyc

    • Size

      10KB

    • MD5

      ef205108a644367eb72a426aa0937304

    • SHA1

      541b6906da13a79ce87c7696cd7e07db68238a45

    • SHA256

      10c5cb910c18b4bbfd57ea861f327f28c34cc607bdbb6022e904f0e6fd1ae414

    • SHA512

      a61c240a84e93481c67ee875f530db6bfdaeeec61eb928d0e70dd70d23ab2470786131eed2fe4dbb80d20408947439bbd0e137c094c44563569ace575bf5ab2e

    • SSDEEP

      192:WR52l5YS/RUHvy3qWJcm+R/G+qOEv4yqxbPSUUJU1T6YaP+wOR:Wrs34nm+k+qXv4yqlPSbJKayR

    Score
    3/10
    • Target

      DDoS-Ripper Pro/pytransform/_pytransform.dll

    • Size

      1.1MB

    • MD5

      41e4a13fe6da012977223734237f4548

    • SHA1

      7e66a8f08b96505e16520a01d5cbb72e06491d2a

    • SHA256

      a200030feb7d83b39d249f1e39141b34234437780842cc4f4869edd2f253d435

    • SHA512

      6a37b0fd3202558c000c8426d6914956604ab583e837c3033a962fe2ce8b31f5c7c240b0b7c7c19d2f8e18e5d60eaef9983995e675abaae954182ad3f97ce980

    • SSDEEP

      24576:4tMBvpcZzdcZ7fUoPOSJiV9nZdencCnQBR:VvpcdPZsn4R

    Score
    1/10
    • Target

      DDoS-Ripper-main/DRipper Free/DRipper.py

    • Size

      45KB

    • MD5

      580378acb814c7f7fc55d9d527d023d5

    • SHA1

      a17b00c9a90696ddce63c7159ed5e4144050be7a

    • SHA256

      33ed3cddc6718ddc6cd29395bcfd72ba381a4cc913ec1f49b4db505e19569a43

    • SHA512

      76c08899abfb619e7f8ca97886f6da9e89133626a5ae0882cfb1659f5f741bd36722f3e90cffdb0b32f3cf7e49ad98b729c80ab7657de95a2d0104f4d4a3e8d8

    • SSDEEP

      768:k5rvqAT05gmlPJoSQonpz+kNoZKaOUeqZtgej/Vt4EThIJILUZrlzuGiiYyYg+fN:Kr1I5RpzPobOUeqTtjVt4+hIJ4O5vRYF

    Score
    3/10
    • Target

      DDoS-Ripper-main/DRipper Free/pytransform/__init__.py

    • Size

      12KB

    • MD5

      ad549846d2ee1fdf93ee1d5f52cc8401

    • SHA1

      dc8653cd3502b99b00b04de613861b4ede2bc846

    • SHA256

      4207a171269b22a0b2eb75f7fab0b2912d9da63453d43cce9a7d808730934a1a

    • SHA512

      c12f36fd9a89c7b0c46e3b47b262f7bbae63f3b7e38db4e8642f9258823678f0afff49b493fa707ef2688b409e6333749b438d33c0996e4fca31c7fc38612252

    • SSDEEP

      192:sIRqXEqbHCTMRNhvyRW3Tt3JbtZeFRuJ0X9d1X2wiQvrT7k/aJdlGbc8/SXRl3RJ:sF3Fyu8FJYEjlh8c

    Score
    3/10
    • Target

      DDoS-Ripper-main/DRipper Free/pytransform/_pytransform.dll

    • Size

      1.1MB

    • MD5

      9c60e9fa68a77b7c9fa7e981987acc35

    • SHA1

      b58c8f0382811552e01e4820ca2eef53609a8bcd

    • SHA256

      aef65437ecd62f2051a43ca33b5416d5a8232d9e134ebab67eed796150ff5bfc

    • SHA512

      de372a0112f0c5debda0437758b50b0acf2288ff8ba86b18cc12abaff88813557a0ba4ed66311d7a1dd9167127881a1a5691e7e40e67493033db2d270c5a6771

    • SSDEEP

      24576:4tMBvpcZzdcZ7fUoPOSJiV9nZQencCnQBR:VvpcdPZLn4R

    Score
    1/10
    • Target

      DDoS-Ripper-main/DRipper.py

    • Size

      10KB

    • MD5

      fa7ebddc0b88a42625a4e7689d6a5f85

    • SHA1

      eadd2e7bbb59dc82bae79554978760c2175d3a41

    • SHA256

      740877807e1282bae1690d6bc0a0493ffad2c9266148713fb5bb13cdd374e4dc

    • SHA512

      9a9d2cc889bbb7c5a4717a6ea539523d41938a2974177f498e4ed7cf8e6cd9fbb4ebf6f65ade8355b56e5cef9c98919362a800b80c036def43c35192ebc3c0a7

    • SSDEEP

      192:xLW9I9voXAzM1W1VpPgJJ7XuZL9zNkVDV/dC:g9fnzulFNk3/dC

    Score
    3/10
    • Target

      New folder/python-3.11.5-amd64.exe

    • Size

      24.7MB

    • MD5

      3afd5b0ba1549f5b9a90c1e3aa8f041e

    • SHA1

      f68e39fc58029b272f3138eb9e6058ece72631ec

    • SHA256

      1bb46f65bb6f71b295801c8ff596bb5b69fa4c0645541db5f3d3bac33aa6eade

    • SHA512

      c86bbeacad3ae3c7bde747f5b4f09c11eced841add14e79ec4a064e5e29ebca35460e543ba735b11bfb882837d5ff4371ce64492d28d096b4686233c9a8cda6d

    • SSDEEP

      786432:e4t7SDsf+VDTKtIPvpGW47zFkN5x1Ef8d9zr:t6sf+VDTK2PMWSs5x10qr

    Score
    4/10

MITRE ATT&CK Enterprise v15

Tasks