Overview

overview

7

Static

static

3

Masscan Ad...ss.url

windows10-1703-x64

1

Masscan Ad...UI.exe

windows10-1703-x64

1

Masscan Ad...et.dll

windows10-1703-x64

1

Masscan Ad..._3.exe

windows10-1703-x64

7

$PLUGINSDI...ns.dll

windows10-1703-x64

3

$PLUGINSDI...al.ini

windows10-1703-x64

1

$PLUGINSDI...er.bmp

windows10-1703-x64

4

$PLUGINSDI...rd.bmp

windows10-1703-x64

4

$SYSDIR/Packet.dll

windows10-1703-x64

1

$SYSDIR/pthreadVC.dll

windows10-1703-x64

1

$SYSDIR/wpcap.dll

windows10-1703-x64

1

WinPcapInstall.dll

windows10-1703-x64

3

rpcapd.exe

windows10-1703-x64

1

Masscan Ad...ig.ini

windows10-1703-x64

1

Masscan Ad...an.exe

windows10-1703-x64

1

Masscan Ad...00.dll

windows10-1703-x64

3

Masscan Ad...ap.dll

windows10-1703-x64

3

Analysis

  • max time kernel
    615s
  • max time network
    1593s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    15-06-2024 08:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Masscan Advanced Mode/WinPcap_4_1_3.exe

  • Size

    893KB

  • MD5

    a11a2f0cfe6d0b4c50945989db6360cd

  • SHA1

    e2516fcd1573e70334c8f50bee5241cdfdf48a00

  • SHA256

    fc4623b113a1f603c0d9ad5f83130bd6de1c62b973be9892305132389c8588de

  • SHA512

    2652d84eb91ca7957b4fb3ff77313e5dae978960492669242df4f246296f1bedaa48c0d33ffb286b2859a1b86ef5460060b551edca597b4ec60ee08676877c70

  • SSDEEP

    24576:UBOldyR6ORWsaM2QROxa6jsqUENfJjNK/CG6niqiL:2KzqWsayROxa6QDENuaG+ifL

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\Masscan Advanced Mode\WinPcap_4_1_3.exe
    "C:\Users\Admin\AppData\Local\Temp\Masscan Advanced Mode\WinPcap_4_1_3.exe"
    1⤵
    • Loads dropped DLL
    PID:204

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsl6274.tmp\ioSpecial.ini
    Filesize

    578B

    MD5

    d0dc06f7800c306e222584d658e5a180

    SHA1

    444a947ba7d25fbb565501f6916098cdcba97d48

    SHA256

    96c6855b9633c4f42bba2dd6d2e15573d27ea6170c298dd4375e19c5f9f74d5f

    SHA512

    10f0926951890b4d55a8026c2aa79a9c8bb476ebb2e8cfc6af62d1c711306b92c8f9c290a4d92214703a5a0a980b4d7cc942915948f7320fd3f96d5d8916d0b2

    Download Submit

  • \Users\Admin\AppData\Local\Temp\nsl6274.tmp\InstallOptions.dll
    Filesize

    14KB

    MD5

    325b008aec81e5aaa57096f05d4212b5

    SHA1

    27a2d89747a20305b6518438eff5b9f57f7df5c3

    SHA256

    c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

    SHA512

    18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

    Download Submit

  • \Users\Admin\AppData\Local\Temp\nsl6274.tmp\UserInfo.dll
    Filesize

    4KB

    MD5

    7579ade7ae1747a31960a228ce02e666

    SHA1

    8ec8571a296737e819dcf86353a43fcf8ec63351

    SHA256

    564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5

    SHA512

    a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b

    Download Submit