Analysis
- max time kernel
149s - max time network
105s - platform
windows11-21h2_x64 - resource
win11-20250502-en - resource tags
- submitted
11/05/2026, 00:05
General
- Target masScan_1.6/masScan_1.6/nlchecker.exe
- Size 6.6MB
- Sample260511-adn8lsbx9n
- SHA256 bb0051be3e9db6d8299477ed7ff9d1d178d98513ab6d6d4f06b860bfe8cc229b
Malware Config
Signatures
- Loads dropped DLL 64 IoCs
- UPX packed file 43 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\masScan_1.6\masScan_1.6\nlchecker.exe"C:\Users\Admin\AppData\Local\Temp\masScan_1.6\masScan_1.6\nlchecker.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\masScan_1.6\masScan_1.6\nlchecker.exe"C:\Users\Admin\AppData\Local\Temp\masScan_1.6\masScan_1.6\nlchecker.exe"2⤵
- Loads dropped DLL
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
_raw_ocb.pyd
_raw_ofb.pyd
_ghash_clmul.pyd
_ghash_portable.pyd
_scrypt.pyd
_cpuid_c.pyd
NLChecker.exe.manifest
_cffi_backend.pyd
python27.dll
_Salsa20.pyd
_raw_cbc.pyd
_raw_cfb.pyd
_raw_ctr.pyd
_raw_ecb.pyd
_BLAKE2s.pyd
_MD5.pyd
_SHA1.pyd
_SHA256.pyd
_strxor.pyd
_ctypes.pyd
_hashlib.pyd
_multiprocessing.pyd
_socket.pyd
_ssl.pyd
bz2.pyd
memory/776-116-0x000002A9AFF30000-0x000002A9AFF36000-memory.dmp
memory/776-198-0x000002A9B39B0000-0x000002A9B39BB000-memory.dmp
memory/776-128-0x000002A9AFF60000-0x000002A9AFF66000-memory.dmp
memory/776-136-0x000002A9AFF80000-0x000002A9AFF86000-memory.dmp
memory/776-124-0x000002A9AFF50000-0x000002A9AFF56000-memory.dmp
memory/776-140-0x000002A9AFF90000-0x000002A9AFF9B000-memory.dmp
memory/776-120-0x000002A9AFF40000-0x000002A9AFF46000-memory.dmp
memory/776-112-0x0000000180000000-0x0000000180033000-memory.dmp
memory/776-148-0x0000000075E80000-0x00000000761F8000-memory.dmp
memory/776-149-0x000002A9AFFA0000-0x000002A9AFFAC000-memory.dmp
memory/776-150-0x000002A9AFFB0000-0x000002A9AFFBC000-memory.dmp
memory/776-109-0x0000000075D40000-0x0000000075D51000-memory.dmp
memory/776-106-0x00007FFDDD290000-0x00007FFDDD4A1000-memory.dmp
memory/776-103-0x0000000075D60000-0x0000000075D74000-memory.dmp
memory/776-100-0x00007FFDDD4B0000-0x00007FFDDD64F000-memory.dmp
memory/776-179-0x000002A9B38C0000-0x000002A9B38C6000-memory.dmp
memory/776-180-0x000002A9B38D0000-0x000002A9B38D6000-memory.dmp
memory/776-182-0x000002A9B38F0000-0x000002A9B38F6000-memory.dmp
memory/776-184-0x000002A9B3910000-0x000002A9B3916000-memory.dmp
memory/776-183-0x000002A9B3900000-0x000002A9B3906000-memory.dmp
memory/776-181-0x000002A9B38E0000-0x000002A9B38E6000-memory.dmp
memory/776-185-0x000002A9B3960000-0x000002A9B3966000-memory.dmp
memory/776-186-0x000002A9B3970000-0x000002A9B3976000-memory.dmp
memory/776-196-0x000002A9B39A0000-0x000002A9B39A6000-memory.dmp
memory/776-195-0x0000000075D40000-0x0000000075D51000-memory.dmp
memory/776-132-0x000002A9AFF70000-0x000002A9AFF76000-memory.dmp
memory/776-200-0x000002A9B39D0000-0x000002A9B39E4000-memory.dmp
memory/776-201-0x000002A9B39F0000-0x000002A9B39FB000-memory.dmp
memory/776-199-0x000002A9B39C0000-0x000002A9B39C6000-memory.dmp
memory/776-197-0x0000000180000000-0x0000000180033000-memory.dmp
memory/776-194-0x000002A9B3990000-0x000002A9B399A000-memory.dmp
memory/776-193-0x000002A9B3950000-0x000002A9B395A000-memory.dmp
memory/776-192-0x000002A9B3940000-0x000002A9B394C000-memory.dmp
memory/776-191-0x000002A9B3930000-0x000002A9B393C000-memory.dmp
memory/776-190-0x000002A9B3920000-0x000002A9B392B000-memory.dmp
memory/776-189-0x000002A9B38A0000-0x000002A9B38AB000-memory.dmp
memory/776-188-0x00007FFDDD290000-0x00007FFDDD4A1000-memory.dmp
memory/776-187-0x000002A9B3980000-0x000002A9B3986000-memory.dmp
memory/776-178-0x000002A9B38B0000-0x000002A9B38B6000-memory.dmp
memory/776-175-0x000002A9B3890000-0x000002A9B3896000-memory.dmp
memory/776-97-0x0000000075D80000-0x0000000075D9E000-memory.dmp
memory/776-172-0x000002A9B3880000-0x000002A9B388A000-memory.dmp
memory/776-171-0x0000000075D60000-0x0000000075D74000-memory.dmp
memory/776-94-0x0000000075DA0000-0x0000000075DC5000-memory.dmp
memory/776-163-0x00007FFDDD4B0000-0x00007FFDDD64F000-memory.dmp
memory/776-161-0x000002A9AFFE0000-0x000002A9AFFE6000-memory.dmp
memory/776-91-0x0000000075E80000-0x00000000761F8000-memory.dmp
memory/776-157-0x000002A9AFFD0000-0x000002A9AFFD6000-memory.dmp
memory/776-154-0x000002A9AFFC0000-0x000002A9AFFCA000-memory.dmp
memory/776-166-0x000002A9B3870000-0x000002A9B3876000-memory.dmp
memory/776-206-0x000002A9AFF20000-0x000002A9AFF2C000-memory.dmp
memory/776-202-0x0000000075E80000-0x00000000761F8000-memory.dmp