Resubmissions
08/09/2024, 09:49
240908-ltpd4aygpj607/09/2024, 21:53
240907-1rsq3axcrn307/09/2024, 21:50
240907-1qbq6axckp307/09/2024, 21:47
240907-1nltcazblh607/09/2024, 21:46
240907-1mtskazbja307/09/2024, 21:44
240907-1lm9dszalh607/09/2024, 21:41
240907-1jybksyhpc8Analysis
- max time kernel
0s - max time network
22s - platform
ubuntu-22.04_amd64 - resource
ubuntu2204-amd64-20240611-en - resource tags
arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system - submitted
07/09/2024, 21:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DDoS-Ripper Pro/DRipper.py
Resource
ubuntu2204-amd64-20240611-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
DDoS-Ripper Pro/pytransform/__init__.py
Resource
ubuntu2204-amd64-20240729-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
DDoS-Ripper Pro/pytransform/__pycache__/__init__.cpython-38.pyc
Resource
ubuntu2204-amd64-20240729-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
DDoS-Ripper Pro/pytransform/_pytransform.dll
Resource
ubuntu2204-amd64-20240611-en
0 signatures
150 seconds
General
- Target DDoS-Ripper Pro/DRipper.py
- Size 47KB
- Sample240907-1mtskazbja
- SHA256 2f8ffe7521b02a75326cbd70a1783294809fb0c6e3f6a02af72bdc86bf1d7b36
- MD5 836fb4703be19909e41c9b5f8db4b357
- SHA1 b99ef3621d34d01597c4ebeda84a08584f630068
- SHA512 b941cfa9519f9b021bffc67499ce9552015c72dcf2511b6d5500dc495e63e028fc3de9990ef17e842e0705f338d1520ab76ddac3c674641800b6a7eafaba0bec
- SSDEEP 768:0H91otr8AvZxM6DoFUD6iNUTRUvbV8M3s30MoT3ECBY5jZIJZGmwKS:0HDO/6UD6iNYRQJ8Mc30plY5mJwmc
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/DDoS-Ripper Pro/pytransform/__pycache__/__init__.cpython-310.pyc.140397364312624 python3