Overview

overview

3

Static

static

3

ninjarippe...mp.exe

windows10-2004-x64

3

blender-im...nja.py

windows10-2004-x64

3

ninjarippe...rip.py

windows10-2004-x64

3

fmt_ninjar...rip.py

windows10-2004-x64

3

ninjarippe...er.exe

windows10-2004-x64

1

ninjarippe...ap.dll

windows10-2004-x64

1

ninjarippe...er.exe

windows10-2004-x64

1

ninjarippe...er.dll

windows10-2004-x64

1

ninjarippe...er.exe

windows10-2004-x64

3

ninjarippe...ap.dll

windows10-2004-x64

3

ninjarippe...8d.dll

windows10-2004-x64

3

ninjarippe...er.exe

windows10-2004-x64

3

ninjarippe...er.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    92s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-10-2024 03:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ninjaripper1.7.1/x64/intruder.dll

  • Size

    1.0MB

  • MD5

    dee02d7dd4b822ab1204c4e14f8cb5c8

  • SHA1

    5d0a06da3e259d6849459932471c2563e9a60b17

  • SHA256

    3aa424f235d3ca6919745c88441e52e5b948b090610b7d64246e19beef85a3f5

  • SHA512

    03442288cc6ccd97dfb3c37fc493a3faef9bad3f433ec0afde24bde8b941ec3d08d097ac4cbb72f65c206069be209793a310f331d79d317ba6ea98a0de864402

  • SSDEEP

    12288:rpAJ9VYtR33pcHpNqRGkJb7SYfag//7ZN3Vp:rk9VYtRHpcJNqIkJb7Vfag/tD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 32 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\ninjaripper1.7.1\x64\intruder.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/644-0-0x00007FFE16780000-0x00007FFE16781000-memory.dmp

    Filesize

    4KB

    Download