Overview

overview

8

Static

static

3

masScan_1....UI.exe

windows10-2004-x64

7

masScan_1....UI.exe

windows11-21h2-x64

4

masScan_1....et.dll

windows10-2004-x64

3

masScan_1....et.dll

windows11-21h2-x64

3

masScan_1....an.exe

windows10-2004-x64

3

masScan_1....an.exe

windows11-21h2-x64

3

masScan_1....00.dll

windows10-2004-x64

3

masScan_1....00.dll

windows11-21h2-x64

3

masScan_1....er.exe

windows10-2004-x64

7

masScan_1....er.exe

windows11-21h2-x64

7

masScan_1....13.exe

windows10-2004-x64

8

masScan_1....13.exe

windows11-21h2-x64

8

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

$SYSDIR/Packet.dll

windows10-2004-x64

3

$SYSDIR/Packet.dll

windows11-21h2-x64

3

$SYSDIR/pthreadVC.dll

windows10-2004-x64

3

$SYSDIR/pthreadVC.dll

windows11-21h2-x64

3

$SYSDIR/wpcap.dll

windows10-2004-x64

3

$SYSDIR/wpcap.dll

windows11-21h2-x64

3

masScan_1....ap.dll

windows10-2004-x64

3

masScan_1....ap.dll

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    masScan_1.6.rar
  • Size 7.3MB
  • Sample260511-adn8lsbx9n
  • SHA256 e90d6b13f80b20f6bf2c04cc959cd4be15630b2da0364bdcc909130937db1013
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoveryinstallerpyinstallerupx

Malware Config

Targets

    • Target
      masScan_1.6/masScan_1.6/Massscan_GUI.exe
    • Size 334KB
    • SHA256 37ff328175acd45ef27d3d339c3127a7612ad713fccd9c9aae01656dfbf13056
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2
    • Target
      masScan_1.6/masScan_1.6/Packet.dll
    • Size 94KB
    • SHA256 6b19cffaa2bf4359be1a0130a1fb47ab45e8c3be5d0cb7986579c5e04e1d77a5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      masScan_1.6/masScan_1.6/masscan.exe
    • Size 232KB
    • SHA256 de903a297afc249bb7d68fef6c885a4c945d740a487fe3e9144a8499a7094131
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      masScan_1.6/masScan_1.6/msvcr100.dll
    • Size 755KB
    • SHA256 8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral7behavioral8
    • Target
      masScan_1.6/masScan_1.6/nlchecker.exe
    • Size 6.6MB
    • SHA256 bb0051be3e9db6d8299477ed7ff9d1d178d98513ab6d6d4f06b860bfe8cc229b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    upx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral10behavioral9
    • Target
      masScan_1.6/masScan_1.6/winpcap-4.13.exe
    • Size 423KB
    • SHA256 f28156a96be558dfb83a3d935223a127816ad124b94f92c499400c38078ad842
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral11behavioral12
    • Target
      $PLUGINSDIR/InstallOptions.dll
    • Size 14KB
    • SHA256 1edf8dc7b6ef67e7cf68f6b07f38be5b336b5e6b2d1d5500cdb3e121b8381394
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral13behavioral14
    • Target
      $PLUGINSDIR/System.dll
    • Size 10KB
    • SHA256 3198d832c222a9907d3d5822116c944fd1c6670a263b775212104a9ecf88beec
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral15behavioral16
    • Target
      $PLUGINSDIR/nsExec.dll
    • Size 6KB
    • SHA256 7994b5dbbd63253b8e11ee5d4aa34c61852d5f86a9c4a35ef421de2c26c80cd9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral17behavioral18
    • Target
      $SYSDIR/Packet.dll
    • Size 99KB
    • SHA256 cd9f4fb077c25013226e0883f9ae02e9ced9b71f07637081e55ae70fd0788f29
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral19behavioral20
    • Target
      $SYSDIR/pthreadVC.dll
    • Size 52KB
    • SHA256 99c61abf41c3aec38cab3ed6270adbca9a247bbf5f9aa9d29ecb0659a5527f48
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral21behavioral22
    • Target
      $SYSDIR/wpcap.dll
    • Size 275KB
    • SHA256 b967e4dce952f9232592e4c1753516081438702a53424005642700522055dbc9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral23behavioral24
    • Target
      masScan_1.6/masScan_1.6/wpcap.dll
    • Size 220KB
    • SHA256 4c2b690d8d9afaefc531d1fedcf2d067ffca8b7e2f99072014b6a6d8edfdc49c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral25behavioral26

MITRE ATT&CK Enterprise v16

Tasks

static1

pyinstallerinstaller
Score
3/10

behavioral1

discovery
Score
7/10

behavioral2

discovery
Score
4/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

upx
Score
7/10

behavioral10

upx
Score
7/10

behavioral11

discovery
Score
8/10

behavioral12

discovery
Score
8/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10