Overview

overview

3

Static

static

3

ninjarippe...mp.exe

windows10-2004-x64

3

blender-im...nja.py

windows10-2004-x64

3

ninjarippe...rip.py

windows10-2004-x64

3

fmt_ninjar...rip.py

windows10-2004-x64

3

ninjarippe...er.exe

windows10-2004-x64

1

ninjarippe...ap.dll

windows10-2004-x64

1

ninjarippe...er.exe

windows10-2004-x64

1

ninjarippe...er.dll

windows10-2004-x64

1

ninjarippe...er.exe

windows10-2004-x64

3

ninjarippe...ap.dll

windows10-2004-x64

3

ninjarippe...8d.dll

windows10-2004-x64

3

ninjarippe...er.exe

windows10-2004-x64

3

ninjarippe...er.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file

  • Size

    3.1MB

  • Sample

    241005-dkv7aawdlf

  • MD5

    fb15ed3fe3077461bdd6427f161b0591

  • SHA1

    f324ab82ec1b79b7a374b26fb9270ee0a5fa4991

  • SHA256

    60541e6a43661f0ee2e70c0a7cedb86d44a874e5376949db7a2e1f604fa5cdf1

  • SHA512

    0e36752bf751432755769146cddddc6c74e1318a8f538a436652b6343fda3999957690f8a1c4edad8d2090cb7471a6df8f02dfe5a2e6c57c3528d5abb9305daa

  • SSDEEP

    98304:/JxVhGkdUWXXQ5sE5mPLhG6tHrVJFbj7yvk7YcJ:/JDhGkdUACsEks6tHrVnvEk7J

Score
3/10
discovery

Malware Config

Targets

    • Target

      ninjaripper1.7.1/ripdump.exe

    • Size

      111KB

    • MD5

      8d609911365949348777f5db224ebd75

    • SHA1

      78a047d2dc6980c0c453c404f13fa13756a1123e

    • SHA256

      1e6c5b07d3903ad9e1a715b4585e4d7dd1ab3995652fddea6f01ef4413f032af

    • SHA512

      bebb763fba396eb2a68434551ef8ff83e9f4fd47ea4cb84662e895f4342b841353a4ee918accd1bc95ad5420255e0fd0716844d9eaf84cfd22090215b2f43a20

    • SSDEEP

      1536:cw8sBGZ2acw+VWXEzzeOLOiYMJyQnsOxfifc7pesWjcdL+f+uXBdM:qqGEzTWUfZDhqopBL+fpf

    Score
    3/10
    discovery
    behavioral1

    • Target

      blender-import-ninjaripper-master/import-ninja.py

    • Size

      35KB

    • MD5

      52ce68484e9d112e83d1f42a52c1e8a0

    • SHA1

      54797af0e276d621db8d4c78c90a1a1105c047fc

    • SHA256

      4e57a2e90bec8aef13dba4108a6c9f1e64f83f66de519c7c600461ebc5b44446

    • SHA512

      f255b70c691b8391cb41b7dbab95d96f3358dea9ca13229d94fe30f74caddf39c0bbb3cbf49f14f296e6ff430513cf6f4e9067395143a7381139fcf080bfee94

    • SSDEEP

      384:GHSEmAd4tbTBMXyNguYpNlVbtte/dEsSJja1CKND6owtqPPisf7lHfrCblUfLdfU:kSEmAmU4v1CKt6owiLBslUfLd3U8XrBi

    Score
    3/10
    behavioral2

    • Target

      ninjaripper1.7.1/tools/noesis_importer/fmt_ninjaripper_rip.py

    • Size

      20KB

    • MD5

      70a426051a4f658f985c1c307703ecb9

    • SHA1

      8713395909bf76c5fa1c101cea502c952b553621

    • SHA256

      8a2b032423897a250bc215f889f601fecd70a013f5447ac3d4b73d5e4f31224d

    • SHA512

      08a8cecd470cd0d04b1aa96cf54a949b68d4a49023a7ffd256472e1e25da5b655c8831ed1b60830e5705540132f3894d848c1ff464210f419519d125734e481e

    • SSDEEP

      384:HYco1oM9Y6NhbO0GWb03WZ0XbZxLFrujP80IhjLQ2YYQ9yr70FqFbVJ0BoMTjeia:HY/vb29pjLyOEBBjez

    Score
    3/10
    behavioral3

    • Target

      fmt_ninjaripper_rip.py

    • Size

      20KB

    • MD5

      c031d330a3d9c0e8f334e9abc272c0ac

    • SHA1

      c4260db49992875538499d3a37e56ee82c2a7a19

    • SHA256

      c75728c1970228d9f7717e4f135633c5f92fed9a66bb7c95b725cb4ad12d6c09

    • SHA512

      c25de66d59a49a6f02483a99c8ebc36a0b2291c94ffd560353ff6cd5b0a0a8767143446cd14929afff079839b2025f3400ef709887fb93c65bb2ca90a9315bbf

    • SSDEEP

      384:VoL4o1oM9Y6NhbO0GWb03WZ0XbZxLFrujP80IhjLhT2YYQ9yr70ApoqFbVJ0BoMa:VoLjvb29pjLBOTSBBjez

    Score
    3/10
    behavioral4

    • Target

      ninjaripper1.7.1/x64/NinjaRipper.exe

    • Size

      568KB

    • MD5

      8c6d5cf1ef2c29b96353fb26f464c54c

    • SHA1

      9b94cd9836d314bbee4ff1a73fc5896eb0ce6a8d

    • SHA256

      770db7ee89caff8399f896a914ef69bf9ec2d21fd2814576e5cdaec69a53f5e0

    • SHA512

      152ec0711cff4db29dd1f7d95d31b7465b3cf0bddfdd4c1c954034d1abe67e2eaee35af4c051fa4bf6b2990d64444322b95c37c2d13491b4a60d351d99a8081d

    • SSDEEP

      6144:lu6B47vTcKOhbgyXJdZaPPMluczxa2M9ykc0xRIinuw6C:s6GAdntOS

    Score
    1/10
    behavioral5

    • Target

      ninjaripper1.7.1/x64/d3dwrap.dll

    • Size

      154KB

    • MD5

      5f2d762679a865b86821175306daa768

    • SHA1

      36dcfb98abd00e2f7728d9cabab56d1ddd4a965d

    • SHA256

      644f1535b71b7a61b16020c8feb3b5eb9d1ed53462f9f2fae858592b99693d7c

    • SHA512

      6e3a06d10ea5ca6f6464abceb93ab5c4da02821d465b9ff667487535290c9c919306a725c476beb63845e853c4c200a017d01be8d754821dfc1c00a1de8b2365

    • SSDEEP

      3072:95TE4DSGXBxJlTWqMDpDWmR7A4LZNwZm+1JGgct7:vTaaxJlT4pDn04tsJBch

    Score
    1/10
    behavioral6

    • Target

      ninjaripper1.7.1/x64/injhelper.exe

    • Size

      130KB

    • MD5

      a20a515bf55bd15e6aaf201263ae0c70

    • SHA1

      07feb65f7c36194b5309be1716684529083f6662

    • SHA256

      07972939ccb955e298b133cfa6a34a819d062c4d5483ac69a54174a8566ed176

    • SHA512

      af04eb8e8b24bdf0e66b7f1b664baea8e009baba3cfff1cd728d2d2e55cd56d93b2d08ee3163b1c6aca0ff72da3a5edd5af116ffda24cd161f9a56a4fc896bd9

    • SSDEEP

      3072:8LrEFVhpuOgSJETdRUFuPDEHMpubUu/TI/q+ZMQirWJV:urwhpuOZeTd5PAHs0DbIiON

    Score
    1/10
    behavioral7

    • Target

      ninjaripper1.7.1/x64/intruder.dll

    • Size

      1.0MB

    • MD5

      dee02d7dd4b822ab1204c4e14f8cb5c8

    • SHA1

      5d0a06da3e259d6849459932471c2563e9a60b17

    • SHA256

      3aa424f235d3ca6919745c88441e52e5b948b090610b7d64246e19beef85a3f5

    • SHA512

      03442288cc6ccd97dfb3c37fc493a3faef9bad3f433ec0afde24bde8b941ec3d08d097ac4cbb72f65c206069be209793a310f331d79d317ba6ea98a0de864402

    • SSDEEP

      12288:rpAJ9VYtR33pcHpNqRGkJb7SYfag//7ZN3Vp:rk9VYtRHpcJNqIkJb7Vfag/tD

    Score
    1/10
    behavioral8

    • Target

      ninjaripper1.7.1/x86/NinjaRipper.exe

    • Size

      547KB

    • MD5

      d8d424a642fe52e5159aa52d34769cc0

    • SHA1

      684302fb7e6406da5671448fe826293023408281

    • SHA256

      8962947853edbc15e41f85d9e7468355a345f26e9ac9b70744f652b5beb85ed1

    • SHA512

      5c261b5cbc2b8c9899058fba72a4939d3e889678b2cb8d366425d5b25ecfbb7da5d223f6bcf934cbd5c263242352d5700e231a4dd576ff71ae19e4e0f75d7e43

    • SSDEEP

      6144:9dpBTuEa1Q40hPwBuczxa2M9ykc0xRIinuw6C9/Uy:9VTuEa1gEOSW/U

    Score
    3/10
    discovery
    behavioral9

    • Target

      ninjaripper1.7.1/x86/d3dwrap.dll

    • Size

      126KB

    • MD5

      bcd2b978b5b6e054329918191f5e4f59

    • SHA1

      2ccb4a14a5f57a8b7f017d35f05c3f508cd00e77

    • SHA256

      2ef4a920ec0565e29e5cf4150a2262177b65197a369929ea530835939839b8f7

    • SHA512

      bf8ced021515aa74c15c02f64a477be66b96d78ed93b04d7e8946ddfd96326abdaa0e5c9aed0690e1378ee29997c29265e05834ec7653104c3a0736fd4eef57a

    • SSDEEP

      1536:nsXiYT+/q1hsXI4j4zF/vuS0nk8Ng394CgZccjns8jcdvk+TKP6sDy:nsyYFDs44WYfnk7vk+TKP6sO

    Score
    3/10
    discovery
    behavioral10

    • Target

      ninjaripper1.7.1/x86/d3dx8d.dll

    • Size

      677KB

    • MD5

      06dcb937d1a7c534c9b745e7e9e62985

    • SHA1

      265e38e54ffdde1363d7ce57ab39048960e5ea0a

    • SHA256

      f6e4b6004ba3a6aa8d47f5d273e668123891da09dd3d907ce29d4aaae8ba984e

    • SHA512

      56ecd076c0cf71fcb577e89cec3f7043a8d372e97efd23549114839d22a2488479623fa15868a97d8818170b151725720b666e822764eeccb0ceb0cdef4331cd

    • SSDEEP

      12288:RAaluE+pH6ShnH5Ar1upSJPN74h7ZWyjhh2psN9bCoUy0d:RAaAE+pH6qnG74h0yjeogoo

    Score
    3/10
    discovery
    behavioral11

    • Target

      ninjaripper1.7.1/x86/injhelper.exe

    • Size

      110KB

    • MD5

      4829922348fd41185d6b18914c2e18d5

    • SHA1

      07eb7ee71b038893c25daea89184f05bf8e073f4

    • SHA256

      830429013177f9dbd109172a7b755a7c41f50084ae4468729e637aef64916d34

    • SHA512

      cf6368923d7c1021b50e116934b8b488e5d6c140826c362b8538b9f2eff86dbc9726fdd82069b22d245b7a334e86dd6832c591fee060ff9a3bb620329ea5e705

    • SSDEEP

      1536:3H/Hzaqa1jcxwCxpFHkjwy18hcOLbQsWjcdGn/4+/CeCm0A3G:vK9YxzHkwLbfGA+VCm0A3G

    Score
    3/10
    discovery
    behavioral12

    • Target

      ninjaripper1.7.1/x86/intruder.dll

    • Size

      764KB

    • MD5

      a8db7b9ecfe10c1b241b2bc8e87a8914

    • SHA1

      332e3d9129ac2e281d5e733e55b7dcffee7620b8

    • SHA256

      c24bf074fa8545418d1380ab8c9c673b9aa9dba22b0933ded7b38b5a47af48e3

    • SHA512

      fe9cf48326a56f2f46774bda60f86d3a332b7aadd41e2c47d93c1d0b7ecb0b1732ae8dbae26c6498457aaa40f0256758a24588e4278b57d02e4258ac6cd5b1d1

    • SSDEEP

      12288:oVVFsks6PuOexdrITqY/zvK32Lt8ciNVGdGZDkYXd:oV31PudAO32Lt8uDYt

    Score
    3/10
    discovery
    behavioral13

MITRE ATT&CK Enterprise v15

Tasks