Overview

overview

7

Static

static

3

3dRipperPro.exe

windows7-x64

1

3dRipperPro.exe

windows10-2004-x64

1

Bulk Downloader.exe

windows7-x64

1

Bulk Downloader.exe

windows10-2004-x64

1

Command Li...es.cmd

windows7-x64

1

Command Li...es.cmd

windows10-2004-x64

1

Data/3dripper.exe

windows7-x64

1

Data/3dripper.exe

windows10-2004-x64

1

Data/3dripper.exe

windows7-x64

1

Data/3dripper.exe

windows10-2004-x64

1

Data/DecryptTex.exe

windows7-x64

7

Data/DecryptTex.exe

windows10-2004-x64

7

Data/Noesi...is.exe

windows7-x64

3

Data/Noesi...is.exe

windows10-2004-x64

3

Data/Noesi...gl.dll

windows7-x64

3

Data/Noesi...gl.dll

windows10-2004-x64

3

Data/Noesi...is.dll

windows7-x64

3

Data/Noesi...is.dll

windows10-2004-x64

3

Data/Noesi...on.dll

windows7-x64

3

Data/Noesi...on.dll

windows10-2004-x64

3

Data/Noesi...bx.dll

windows7-x64

3

Data/Noesi...bx.dll

windows10-2004-x64

3

Data/Noesi...iew.py

windows7-x64

3

Data/Noesi...iew.py

windows10-2004-x64

3

Data/Noesi...sis.py

windows7-x64

3

Data/Noesi...sis.py

windows10-2004-x64

3

Data/cares.dll

windows7-x64

1

Data/cares.dll

windows10-2004-x64

1

Data/colla...mt.dll

windows7-x64

1

Data/colla...mt.dll

windows10-2004-x64

1

Data/gdal201.dll

windows7-x64

1

Data/gdal201.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    3d_Ripper_Pro_v93.zip
  • Size 97.6MB
  • Sample240619-spknnsxcql
  • SHA256 ff8c11f132ed73ea6cbdf3dae4f8d02886392d66c1adfef3ad52f5a1f5022cb5
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
pyinstaller

Malware Config

Targets

    • Target
      3dRipperPro.exe
    • Size 304KB
    • SHA256 e45741f4e3730c4f89d5af8adecd6b69d9f9138ab6c7c6e86b01f101e6e5a307
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral1behavioral2
    • Target
      Bulk Downloader.exe
    • Size 40KB
    • SHA256 b56662db454e5198055f0ed00792a58573f0561a448be42e94d9ad781360d875
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral3behavioral4
    • Target
      Command Line Examples.cmd
    • Size 379B
    • SHA256 b6f7616f406f074dc9e75f28df169444f370ba6605bbcff97a165dd799f29126
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral5behavioral6
    • Target
      Data/3dripper.bat
    • Size 17.9MB
    • SHA256 1c2f0763e919df7026c9c2adb70fdfa33b349f0ada0747064b3cdc97d496e229
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral7behavioral8
    • Target
      Data/3dripper.exe
    • Size 94KB
    • SHA256 34f0090be0ff13f267608ff0a0ba0f50849a5fb7a20bb413285255310422bf8b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral10behavioral9
    • Target
      Data/DecryptTex.bat
    • Size 21.9MB
    • SHA256 f255a15a18b6b9745ae74cf3d9689d6dcfbece4e3d01e9bb5eb3ed2854e21524
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Loads dropped DLL

    behavioral11behavioral12
    • Target
      Data/Noesis/Noesis.exe
    • Size 5.2MB
    • SHA256 9c2ba6f23a0c5136380a57f5ac84c4cbe66435348279e5a4b5d1013341db209c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral13behavioral14
    • Target
      Data/Noesis/noegl_opengl.dll
    • Size 412KB
    • SHA256 a353b986a89b150a2c0609dd9ae979195553c7ea8c9e09a0caec7b5c5892f7aa
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral15behavioral16
    • Target
      Data/Noesis/noesis.dll
    • Size 1.7MB
    • SHA256 7ba2d2c9d5e64cd9cf7e9c5451737aeba98f71e31cfe342b757b088a3d2409dd
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral17behavioral18
    • Target
      Data/Noesis/plugins/NoesisPython.dll
    • Size 4.4MB
    • SHA256 49c9c3655ca792e16cc361e1ac320cfc849c28aeff62e344f06fb1e64d09d618
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral19behavioral20
    • Target
      Data/Noesis/plugins/autodesk_fbx.dll
    • Size 6.1MB
    • SHA256 d42976eea9477809752611caf00f489fec204c766830582d388d8d7b36cbcacd
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral21behavioral22
    • Target
      Data/Noesis/plugins/python/fmt_artstation_mview.py
    • Size 5KB
    • SHA256 e0f3d2ab464d62ffd9e027b2477ee4f857e688d1fbf68e16641269c579b981f9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral23behavioral24
    • Target
      Data/Noesis/plugins/python/inc_noesis.py
    • Size 56KB
    • SHA256 fbaccad446bbe2bc2dde6508140bab881e90fbfa4f648fe108f94af7cf62347d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral25behavioral26
    • Target
      Data/cares.dll
    • Size 71KB
    • SHA256 2a45833ab070544140ac87985f952eb3080b0c178255339f0d2f417aaeca27e8
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral27behavioral28
    • Target
      Data/collada-dom2.4-dp-vc141-mt.dll
    • Size 2.8MB
    • SHA256 5e335be575ab347251be1cec9cfb50b0d0ff1c24a8129e1542c765fe43c2e2e4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral29behavioral30
    • Target
      Data/gdal201.dll
    • Size 11.7MB
    • SHA256 535b4760bb8e64b76e11ca29d9cb782582b1f00ddaa2d4722afcb4b6a700e18b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks