Overview
overview
10Static
static
10Hit Sender...ib.dll
windows7-x64
1Hit Sender...ib.dll
windows10-2004-x64
1Hit Sender...ib.dll
windows7-x64
1Hit Sender...ib.dll
windows10-2004-x64
1Hit Sender...er.exe
windows7-x64
10Hit Sender...er.exe
windows10-2004-x64
10Hit Sender...rp.dll
windows7-x64
1Hit Sender...rp.dll
windows10-2004-x64
1Hit Sender...er.dll
windows7-x64
1Hit Sender...er.dll
windows10-2004-x64
1IP Scanner...er.exe
windows7-x64
7IP Scanner...er.exe
windows10-2004-x64
7KPort Scan...V3.exe
windows7-x64
10KPort Scan...V3.exe
windows10-2004-x64
10KPort Scan...e4.dll
windows7-x64
3KPort Scan...e4.dll
windows10-2004-x64
3KPort Scan...i4.dll
windows7-x64
3KPort Scan...i4.dll
windows10-2004-x64
3KPort Scan...k4.dll
windows7-x64
3KPort Scan...k4.dll
windows10-2004-x64
3MassScan/M...UI.exe
windows7-x64
3MassScan/M...UI.exe
windows10-2004-x64
3MassScan/Packet.dll
windows7-x64
3MassScan/Packet.dll
windows10-2004-x64
3MassScan/masscan.exe
windows7-x64
3MassScan/masscan.exe
windows10-2004-x64
3MassScan/msvcr100.dll
windows7-x64
3MassScan/msvcr100.dll
windows10-2004-x64
3MassScan/w....3.exe
windows7-x64
7MassScan/w....3.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
30-07-2024 09:29
Behavioral task
behavioral1
Sample
Hit Sender/AxInterop.MSTSCLib.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Hit Sender/AxInterop.MSTSCLib.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
Hit Sender/Interop.MSTSCLib.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Hit Sender/Interop.MSTSCLib.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
Hit Sender/NLBrute Hit Sender-Checker.exe
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Hit Sender/NLBrute Hit Sender-Checker.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
Hit Sender/RestSharp.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Hit Sender/RestSharp.dll
Resource
win10v2004-20240729-en
Behavioral task
behavioral9
Sample
Hit Sender/SkinSoft.VisualStyler.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
Hit Sender/SkinSoft.VisualStyler.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
IP Scanner (Thay thế cho MassScan chạy trên Guest hoặc không có quyền Administrator)/IP Scanner.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
IP Scanner (Thay thế cho MassScan chạy trên Guest hoặc không có quyền Administrator)/IP Scanner.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
KPort Scaner/KPortScan V3.exe
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
KPort Scaner/KPortScan V3.exe
Resource
win10v2004-20240729-en
Behavioral task
behavioral15
Sample
KPort Scaner/QtCore4.dll
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
KPort Scaner/QtCore4.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
KPort Scaner/QtGui4.dll
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
KPort Scaner/QtGui4.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
KPort Scaner/QtNetwork4.dll
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
KPort Scaner/QtNetwork4.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
MassScan/Massscan_GUI.exe
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
MassScan/Massscan_GUI.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
MassScan/Packet.dll
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
MassScan/Packet.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
MassScan/masscan.exe
Resource
win7-20240729-en
Behavioral task
behavioral26
Sample
MassScan/masscan.exe
Resource
win10v2004-20240729-en
Behavioral task
behavioral27
Sample
MassScan/msvcr100.dll
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
MassScan/msvcr100.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
MassScan/winpcap-4.3.exe
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
MassScan/winpcap-4.3.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240709-en
General
-
Target
MassScan/Massscan_GUI.exe
-
Size
334KB
-
MD5
7a6990bf78f3e2e835d3be85a2fea4ba
-
SHA1
9e2760e0c13d56cb744262b4fdef67e17ee08571
-
SHA256
37ff328175acd45ef27d3d339c3127a7612ad713fccd9c9aae01656dfbf13056
-
SHA512
ba2b8cd80613bff44c1624d6a17bae797b81fb53979f6a901850dac5e824483513cd312ff8a5aaa9d5eb3cf5c825785a7a53965692d2fb6274d22b6e62f9735c
-
SSDEEP
3072:eaxe0aX5Cw9Q56z456zB56zuIXk89V756zM:nanPj8X
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
Massscan_GUI.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Massscan_GUI.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
Massscan_GUI.exedescription pid process Token: SeDebugPrivilege 2968 Massscan_GUI.exe