Overview

overview

7

Static

static

3

Masscan Ad...ss.url

windows10-1703-x64

1

Masscan Ad...UI.exe

windows10-1703-x64

1

Masscan Ad...et.dll

windows10-1703-x64

1

Masscan Ad..._3.exe

windows10-1703-x64

7

$PLUGINSDI...ns.dll

windows10-1703-x64

3

$PLUGINSDI...al.ini

windows10-1703-x64

1

$PLUGINSDI...er.bmp

windows10-1703-x64

4

$PLUGINSDI...rd.bmp

windows10-1703-x64

4

$SYSDIR/Packet.dll

windows10-1703-x64

1

$SYSDIR/pthreadVC.dll

windows10-1703-x64

1

$SYSDIR/wpcap.dll

windows10-1703-x64

1

WinPcapInstall.dll

windows10-1703-x64

3

rpcapd.exe

windows10-1703-x64

1

Masscan Ad...ig.ini

windows10-1703-x64

1

Masscan Ad...an.exe

windows10-1703-x64

1

Masscan Ad...00.dll

windows10-1703-x64

3

Masscan Ad...ap.dll

windows10-1703-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Masscan Advanced Mode (@rdpcrackerss).rar

  • Size

    1.4MB

  • Sample

    240615-ktj9psyalp

  • MD5

    2f44bcda6e6fdeee4cf048dbec0ba331

  • SHA1

    818030eb2aefc1d8f37c8898977e826bb7e64d5a

  • SHA256

    880514cc9f89c732525353bcfff9c3e69e8e7958daa82e0bc3e196ef479d4b84

  • SHA512

    fb6a67d8e042410cc75b717c08dacb0d8d524238720d475e3e8475d57a8a584bfc34faeaf0db03280b813f096c176210f08e36bbd65f573e0ac7405492a66d66

  • SSDEEP

    24576:qq2KOjmaJUZWPMM+VHEHTwzPSoyTLliUinokR9yGVQwP6gqZ0FYXF0bHQiq:qFKOSuUaZ+VkHTOP1yliUIoSuwCgqtFX

Score
7/10

Malware Config

Targets

    • Target

      Masscan Advanced Mode/@rdpcrackerss.url

    • Size

      51B

    • MD5

      3f25650b84db985e956fb961717ef93a

    • SHA1

      3b2c6a5f3e8c67b34d8c254bddae532dd4a7ffb5

    • SHA256

      fb1b7e4dc92fb520e537d7a4770e2ed0fd1784f3bf252ec211aa1967b36f63f1

    • SHA512

      10f0e96e5078a4ca6ef499c8bce2aaed9ecb23421e896c347cb3034b5bd7ccd413074e1f88063839dd7c6fc28cdbb1a037895ee4f9a091ec17ee8f4666e5a906

    Score
    1/10
    behavioral1

    • Target

      Masscan Advanced Mode/Massscan_GUI.exe

    • Size

      334KB

    • MD5

      7a6990bf78f3e2e835d3be85a2fea4ba

    • SHA1

      9e2760e0c13d56cb744262b4fdef67e17ee08571

    • SHA256

      37ff328175acd45ef27d3d339c3127a7612ad713fccd9c9aae01656dfbf13056

    • SHA512

      ba2b8cd80613bff44c1624d6a17bae797b81fb53979f6a901850dac5e824483513cd312ff8a5aaa9d5eb3cf5c825785a7a53965692d2fb6274d22b6e62f9735c

    • SSDEEP

      3072:eaxe0aX5Cw9Q56z456zB56zuIXk89V756zM:nanPj8X

    Score
    1/10
    behavioral2

    • Target

      Masscan Advanced Mode/Packet.dll

    • Size

      94KB

    • MD5

      1250bef11bfa086f772cd2a273bc036e

    • SHA1

      bfb60b4072f4533d8497f3d90631f818e345bcc6

    • SHA256

      6b19cffaa2bf4359be1a0130a1fb47ab45e8c3be5d0cb7986579c5e04e1d77a5

    • SHA512

      76cbc346468d400c4e6a95b3c91abfec0a63a375aade6f47c70a3b3db76c513bcfd91ed2994059a6c8bdd6b266f9b17ecf11f9941481c7a2692925d2457f5bba

    • SSDEEP

      1536:6wG9plhvRIRVC2wJAyPFCnPKc0z70yIKtIn8zVpWj:E9rjh5t9cZyIKtInb

    Score
    1/10
    behavioral3

    • Target

      Masscan Advanced Mode/WinPcap_4_1_3.exe

    • Size

      893KB

    • MD5

      a11a2f0cfe6d0b4c50945989db6360cd

    • SHA1

      e2516fcd1573e70334c8f50bee5241cdfdf48a00

    • SHA256

      fc4623b113a1f603c0d9ad5f83130bd6de1c62b973be9892305132389c8588de

    • SHA512

      2652d84eb91ca7957b4fb3ff77313e5dae978960492669242df4f246296f1bedaa48c0d33ffb286b2859a1b86ef5460060b551edca597b4ec60ee08676877c70

    • SSDEEP

      24576:UBOldyR6ORWsaM2QROxa6jsqUENfJjNK/CG6niqiL:2KzqWsayROxa6QDENuaG+ifL

    Score
    7/10

    • Loads dropped DLL

    behavioral4

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      325b008aec81e5aaa57096f05d4212b5

    • SHA1

      27a2d89747a20305b6518438eff5b9f57f7df5c3

    • SHA256

      c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

    • SHA512

      18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

    • SSDEEP

      192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo

    Score
    3/10
    behavioral5

    • Target

      $PLUGINSDIR/ioSpecial.ini

    • Size

      211B

    • MD5

      e2d5070bc28db1ac745613689ff86067

    • SHA1

      282e080b4cf847174c5c11e4f9157b8c338ecb19

    • SHA256

      d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0

    • SHA512

      a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de

    Score
    1/10
    behavioral6

    • Target

      $PLUGINSDIR/modern-header.bmp

    • Size

      29KB

    • MD5

      d8f59a707b2a5000c7903595eddc3d48

    • SHA1

      e86239fe1dc3cfdbec6006817160eb5f1fc92bca

    • SHA256

      c0e284fde834fe8a6f90504dba7abff25b1e7dd4611483341203fd3efc5de8a6

    • SHA512

      91e28a685733620832d3851d7f3eee36495f2728610bd6c66f305cdda039f75ab8499d0e51e64afa018c221a728889503db2fc7c84cf9599a61b68951686b048

    • SSDEEP

      192:UdCd/28k2hZrlQ+jP3/PGs/ZkTnSQpuWE:UD8jLlQ+jP3///ZUSJ5

    Score
    4/10
    behavioral7

    • Target

      $PLUGINSDIR/modern-wizard.bmp

    • Size

      25KB

    • MD5

      cbe40fd2b1ec96daedc65da172d90022

    • SHA1

      366c216220aa4329dff6c485fd0e9b0f4f0a7944

    • SHA256

      3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2

    • SHA512

      62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63

    • SSDEEP

      24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz

    Score
    4/10
    behavioral8

    • Target

      $SYSDIR/Packet.dll

    • Size

      99KB

    • MD5

      2ce150705bbeb30e6c8059cc530043aa

    • SHA1

      3d8615f9d8f8f7a5d78b3c06bf746948b9ef6ba5

    • SHA256

      cd9f4fb077c25013226e0883f9ae02e9ced9b71f07637081e55ae70fd0788f29

    • SHA512

      9f7573ca679ef0cc0e1d815f605a399e87f7a046e3e51970d2c7597329b19e118cc2da7240ee854e13e31582f12bab8be506d1612ac81d5b453ef366d4674dcf

    • SSDEEP

      1536:zbDKMXRC2wKDDuDirGfqs97WcETlsxtl2o+V:PDKMtfuysAcETlsxtco8

    Score
    1/10
    behavioral9

    • Target

      $SYSDIR/pthreadVC.dll

    • Size

      52KB

    • MD5

      f04a90f917ba10ae2dcbe859870f4dea

    • SHA1

      6668ebe373ce58c33017697c477557653427e626

    • SHA256

      99c61abf41c3aec38cab3ed6270adbca9a247bbf5f9aa9d29ecb0659a5527f48

    • SHA512

      aec29301b9ce311b27f1590b0e0c4121acdc183a30b570e087d77b7035684f02a6dfbdee950c37f3023b32e2ea5a075a5fbe6d18a2804da9490d4959733bb516

    • SSDEEP

      384:hSvfC8Vv0Vy7ojuq7GQcdWTc4zU+GFronD/yD5rBEe0kiH32Jp9AhOW:wt+TGQcdWYdMG59EeJiH3YzW

    Score
    1/10
    behavioral10

    • Target

      $SYSDIR/wpcap.dll

    • Size

      275KB

    • MD5

      4633b298d57014627831ccac89a2c50b

    • SHA1

      e5f449766722c5c25fa02b065d22a854b6a32a5b

    • SHA256

      b967e4dce952f9232592e4c1753516081438702a53424005642700522055dbc9

    • SHA512

      29590fa5f72e6a36f2b72fc2a2cca35ee41554e13c9995198e740608975621142395d4b2e057db4314edf95520fd32aae8db066444d8d8db0fd06c391111c6d3

    • SSDEEP

      6144:E4yIm5rC9WNWwKcNBSCiLvK8+jKgZBwIbg2:jyIm59WwpqCuEKIwv2

    Score
    1/10
    behavioral11

    • Target

      WinPcapInstall.dll

    • Size

      91KB

    • MD5

      e78291558cb803dfd091ad8fb56feecc

    • SHA1

      4bde2f87e903fe8d3bd80179c5584cec7a8cbdc4

    • SHA256

      d9f4cd9f0e1bc9a138fb4da6f83c92c3e86eb3de4f988d5943d75c9b1dc6bb9d

    • SHA512

      042b96bc2c0e6d8b6e2730426938eb7400fd833be8a108a4942f559fedefabc35fd5dcb7ea1898d377b4382c0a9af8eeeebd663a4c852c706e3bd168c1f1f62f

    • SSDEEP

      1536:s7xjrG5m+619YG7L2xo8JfmL4iMtgLZtAeYjFH:s7s27yaL4kVtAeE9

    Score
    3/10
    behavioral12

    • Target

      rpcapd.exe

    • Size

      115KB

    • MD5

      83a6c2cafe236652d1559640594a0ea8

    • SHA1

      c99aa678f387c00c4470fa3cd7b037d26720960d

    • SHA256

      52360f17c9c70c9cea3316560b40c4d89fd705ed7e6b6088c99fc54d4cc35eb5

    • SHA512

      4f6981c4e8d64311087795e9639516409bf80ebca5c7f25af1fb436aaccf90f24617ecd3f95b63558981b12bc0e5eeacf120fea7be5e5fa05ecf3afa4f9f799b

    • SSDEEP

      3072:mL7m5RTfrUna0m2BeIIgJ3155FulLfbt/6:C7m5RTEaseIH515qfA

    Score
    1/10
    behavioral13

    • Target

      Masscan Advanced Mode/_config.ini

    • Size

      28B

    • MD5

      c979fc4c41beb277c73f1485fd3e9140

    • SHA1

      07f173723550375107ba038c1eb16b707ef029bd

    • SHA256

      40362e4311a73e6cbc68502a1dc6997b81841d2ba5fceba563cbf7651f244dff

    • SHA512

      b6795fdc648f8c816d1875805bad19c28bcb67f627163a7f7dea095b2e0b77c5f1d1face10b792167e410c77fe03ab4466ac5aa1d3ac04df128625e0e1f6e9b4

    Score
    1/10
    behavioral14

    • Target

      Masscan Advanced Mode/masscan.exe

    • Size

      232KB

    • MD5

      c50f3b0b23dfe5c66561bb9297bf7bbc

    • SHA1

      5f14241aea174608a7c85127fdad042d7382277d

    • SHA256

      de903a297afc249bb7d68fef6c885a4c945d740a487fe3e9144a8499a7094131

    • SHA512

      33c557c53b4f65cde67bc0f6a7952822d194e0da262aa7d44c1d527ed300043ad1c06002cd42e69ad98ad2c7b62aa98d66ac0aa211ddfa97dde3e737da3f768f

    • SSDEEP

      6144:9WQaNTimmz/EkPt1xeHP9mCeswbjnK6swOp9cL:vMTuz/Ek1eHP9KPf698

    Score
    1/10
    behavioral15

    • Target

      Masscan Advanced Mode/msvcr100.dll

    • Size

      755KB

    • MD5

      0e37fbfa79d349d672456923ec5fbbe3

    • SHA1

      4e880fc7625ccf8d9ca799d5b94ce2b1e7597335

    • SHA256

      8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18

    • SHA512

      2bea9bd528513a3c6a54beac25096ee200a4e6ccfc2a308ae9cfd1ad8738e2e2defd477d59db527a048e5e9a4fe1fc1d771701de14ef82b4dbcdc90df0387630

    • SSDEEP

      12288:nMmCy3nAgPAxN9ueqix/HEmxsvGrif8ZSy+rdQw2QRAtd74/vmYK6H3BVoe3z:MmCy3KxW3ixPEmxsvGrm8Z6r+JQPzV7z

    Score
    3/10
    behavioral16

    • Target

      Masscan Advanced Mode/wpcap.dll

    • Size

      220KB

    • MD5

      5c5561185a8751711156934585f002e8

    • SHA1

      4bc6097e41191903fcec60b5b6363c857e2d25af

    • SHA256

      4c2b690d8d9afaefc531d1fedcf2d067ffca8b7e2f99072014b6a6d8edfdc49c

    • SHA512

      6cb133fb2b8adbf5a939dadb9ea62f9400999eecbb0fd7af07cb6350cb02f2bb9133db61140776ad79addd8574a6ab4d78236ac816e4bbe2f95cf3a77823b2fc

    • SSDEEP

      3072:mHrZxq7dQ2qjbGO4eQ9KuuwN3Ch0kIrNsZ3Gva5aOlqPozwH:mHHqHb5eQEaN3O0kgyZ3j51

    Score
    3/10
    behavioral17

MITRE ATT&CK Enterprise v15

Tasks