General
- Target DDoS-Ripper Pro.zip
- Size 407KB
- Sample240907-1nltcazblh
- SHA256 ce27061cd0f707eed21d820be9d086fe0b313e6d93f735d4600126e3fb73dcf7
- MD5 e5620544131156d9bc88eff166162c0e
- SHA1 79595e1b12fef86bef02a1d1c46224790b9797a3
- SHA512 50b06435c1c0f2a2675510b532d307a4ac715175b7707919197ef23ff3833d9c4560af2c97345d28a8b2aa873d93da7f674f0c5469417401cb3ca46221f31b7a
- SSDEEP 12288:G41BIOWMxCySfUtYr2p8Y8b7kZutM9ZExZlzTmOS93QGVCc:G41BIOp49r2+Y8bIZu69ZErlzTxjGVd
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DDoS-Ripper Pro/DRipper.py
Resource
ubuntu2004-amd64-20240508-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
DDoS-Ripper Pro/pytransform/__init__.py
Resource
ubuntu2004-amd64-20240611-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
DDoS-Ripper Pro/pytransform/__pycache__/__init__.cpython-38.pyc
Resource
ubuntu2004-amd64-20240729-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
DDoS-Ripper Pro/pytransform/_pytransform.dll
Resource
ubuntu2004-amd64-20240611-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target DDoS-Ripper Pro/DRipper.py
- Size 47KB
- SHA256 2f8ffe7521b02a75326cbd70a1783294809fb0c6e3f6a02af72bdc86bf1d7b36
- MD5 836fb4703be19909e41c9b5f8db4b357
- SHA1 b99ef3621d34d01597c4ebeda84a08584f630068
- SHA512 b941cfa9519f9b021bffc67499ce9552015c72dcf2511b6d5500dc495e63e028fc3de9990ef17e842e0705f338d1520ab76ddac3c674641800b6a7eafaba0bec
- SSDEEP 768:0H91otr8AvZxM6DoFUD6iNUTRUvbV8M3s30MoT3ECBY5jZIJZGmwKS:0HDO/6UD6iNYRQJ8Mc30plY5mJwmc
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Legitimate hosting services abused for malware hosting/C2
-
- Target DDoS-Ripper Pro/pytransform/__init__.py
- Size 12KB
- SHA256 4207a171269b22a0b2eb75f7fab0b2912d9da63453d43cce9a7d808730934a1a
- MD5 ad549846d2ee1fdf93ee1d5f52cc8401
- SHA1 dc8653cd3502b99b00b04de613861b4ede2bc846
- SHA512 c12f36fd9a89c7b0c46e3b47b262f7bbae63f3b7e38db4e8642f9258823678f0afff49b493fa707ef2688b409e6333749b438d33c0996e4fca31c7fc38612252
- SSDEEP 192:sIRqXEqbHCTMRNhvyRW3Tt3JbtZeFRuJ0X9d1X2wiQvrT7k/aJdlGbc8/SXRl3RJ:sF3Fyu8FJYEjlh8c
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target DDoS-Ripper Pro/pytransform/__pycache__/__init__.cpython-38.pyc
- Size 10KB
- SHA256 10c5cb910c18b4bbfd57ea861f327f28c34cc607bdbb6022e904f0e6fd1ae414
- MD5 ef205108a644367eb72a426aa0937304
- SHA1 541b6906da13a79ce87c7696cd7e07db68238a45
- SHA512 a61c240a84e93481c67ee875f530db6bfdaeeec61eb928d0e70dd70d23ab2470786131eed2fe4dbb80d20408947439bbd0e137c094c44563569ace575bf5ab2e
- SSDEEP 192:WR52l5YS/RUHvy3qWJcm+R/G+qOEv4yqxbPSUUJU1T6YaP+wOR:Wrs34nm+k+qXv4yqlPSbJKayR
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target DDoS-Ripper Pro/pytransform/_pytransform.dll
- Size 1.1MB
- SHA256 a200030feb7d83b39d249f1e39141b34234437780842cc4f4869edd2f253d435
- MD5 41e4a13fe6da012977223734237f4548
- SHA1 7e66a8f08b96505e16520a01d5cbb72e06491d2a
- SHA512 6a37b0fd3202558c000c8426d6914956604ab583e837c3033a962fe2ce8b31f5c7c240b0b7c7c19d2f8e18e5d60eaef9983995e675abaae954182ad3f97ce980
- SSDEEP 24576:4tMBvpcZzdcZ7fUoPOSJiV9nZdencCnQBR:VvpcdPZsn4R
- MD5 SHA1 SHA512 SSDEEP
Score1/10