Analysis
-
max time kernel
141s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
01-01-2025 04:04
General
-
Target
Ultimate-DDoS-Attack-Tools-Pack/Dark DDoser 5.6/nssdbm3.exe
-
Size
1.9MB
-
MD5
b2ff2c84396125dafbfd74007e03eb0a
-
SHA1
6e27cb62bfd1a534a2e65ea76835fb4e661a3d55
-
SHA256
ba72876bf978152d115b5c92d65708a56f0158dba13874e07aa15f81f0550801
-
SHA512
39248ba9670e124d3d0b7cf0fba13bd09de82a7ed323c8072f7684c726c4eaf155d1f5dc3307eb913df3a8cdf347a93c71928a10e432d55b8a56e8eb8a2e46bb
-
SSDEEP
24576:ZS/HjpXQIeK/taIHjPDbAwFEBCp3JnR9DURFL4zHmse+4AYTW+V7EJu:ErtxFwA9Fr3JAFEXP4AYTz7
Score
6/10
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Ultimate-DDoS-Attack-Tools-Pack\Dark DDoser 5.6\nssdbm3.exe"C:\Users\Admin\AppData\Local\Temp\Ultimate-DDoS-Attack-Tools-Pack\Dark DDoser 5.6\nssdbm3.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
2.0MB