Analysis
- max time kernel
149s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
11/05/2026, 00:05
General
- Target masScan_1.6/masScan_1.6/nlchecker.exe
- Size 6.6MB
- Sample260511-adn8lsbx9n
- SHA256 bb0051be3e9db6d8299477ed7ff9d1d178d98513ab6d6d4f06b860bfe8cc229b
Malware Config
Signatures
- Loads dropped DLL 64 IoCs
- UPX packed file 42 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\masScan_1.6\masScan_1.6\nlchecker.exe"C:\Users\Admin\AppData\Local\Temp\masScan_1.6\masScan_1.6\nlchecker.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\masScan_1.6\masScan_1.6\nlchecker.exe"C:\Users\Admin\AppData\Local\Temp\masScan_1.6\masScan_1.6\nlchecker.exe"2⤵
- Loads dropped DLL
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
_Salsa20.pyd
_raw_cbc.pyd
_raw_cfb.pyd
_raw_ctr.pyd
_raw_ocb.pyd
_raw_ofb.pyd
_BLAKE2s.pyd
_MD5.pyd
_SHA1.pyd
_ghash_clmul.pyd
_ghash_portable.pyd
_scrypt.pyd
_cpuid_c.pyd
_strxor.pyd
NLChecker.exe.manifest
_ssl.pyd
python27.dll
_raw_ecb.pyd
_SHA256.pyd
_cffi_backend.pyd
_ctypes.pyd
_hashlib.pyd
_multiprocessing.pyd
_socket.pyd
bz2.pyd
memory/5680-199-0x000001FDDD630000-0x000001FDDD644000-memory.dmp
memory/5680-184-0x00007FF887910000-0x00007FF887AAF000-memory.dmp
memory/5680-128-0x000001FDDC470000-0x000001FDDC476000-memory.dmp
memory/5680-166-0x000001FDDD4A0000-0x000001FDDD4AA000-memory.dmp
memory/5680-124-0x000001FDDC460000-0x000001FDDC466000-memory.dmp
memory/5680-116-0x000001FDDC440000-0x000001FDDC446000-memory.dmp
memory/5680-180-0x000001FDDD540000-0x000001FDDD546000-memory.dmp
memory/5680-183-0x000001FDDD570000-0x000001FDDD576000-memory.dmp
memory/5680-182-0x000001FDDD560000-0x000001FDDD566000-memory.dmp
memory/5680-192-0x000001FDDD5D0000-0x000001FDDD5D6000-memory.dmp
memory/5680-193-0x000001FDDD5E0000-0x000001FDDD5E6000-memory.dmp
memory/5680-196-0x000001FDDD610000-0x000001FDDD61B000-memory.dmp
memory/5680-200-0x000001FDDD650000-0x000001FDDD65B000-memory.dmp
memory/5680-120-0x000001FDDC450000-0x000001FDDC456000-memory.dmp
memory/5680-198-0x0000000180000000-0x0000000180033000-memory.dmp
memory/5680-197-0x000001FDDD620000-0x000001FDDD626000-memory.dmp
memory/5680-195-0x000001FDDD5F0000-0x000001FDDD5FA000-memory.dmp
memory/5680-194-0x000001FDDD600000-0x000001FDDD606000-memory.dmp
memory/5680-191-0x00007FF87A380000-0x00007FF87A591000-memory.dmp
memory/5680-190-0x000001FDDD5C0000-0x000001FDDD5C6000-memory.dmp
memory/5680-189-0x0000000073C70000-0x0000000073C84000-memory.dmp
memory/5680-188-0x000001FDDD5B0000-0x000001FDDD5BA000-memory.dmp
memory/5680-187-0x000001FDDD5A0000-0x000001FDDD5AC000-memory.dmp
memory/5680-186-0x000001FDDD590000-0x000001FDDD59C000-memory.dmp
memory/5680-185-0x000001FDDD580000-0x000001FDDD58B000-memory.dmp
memory/5680-132-0x000001FDDC480000-0x000001FDDC486000-memory.dmp
memory/5680-181-0x000001FDDD550000-0x000001FDDD556000-memory.dmp
memory/5680-179-0x000001FDDD530000-0x000001FDDD536000-memory.dmp
memory/5680-178-0x000001FDDD520000-0x000001FDDD526000-memory.dmp
memory/5680-177-0x000001FDDD510000-0x000001FDDD516000-memory.dmp
memory/5680-176-0x000001FDDD500000-0x000001FDDD50B000-memory.dmp
memory/5680-175-0x000001FDDD4E0000-0x000001FDDD4EA000-memory.dmp
memory/5680-172-0x000001FDDD4F0000-0x000001FDDD4F6000-memory.dmp
memory/5680-112-0x0000000180000000-0x0000000180033000-memory.dmp
memory/5680-165-0x0000000073D90000-0x0000000074108000-memory.dmp
memory/5680-163-0x000001FDDD4D0000-0x000001FDDD4D6000-memory.dmp
memory/5680-110-0x0000000073C50000-0x0000000073C61000-memory.dmp
memory/5680-159-0x000001FDDD4C0000-0x000001FDDD4C6000-memory.dmp
memory/5680-106-0x00007FF87A380000-0x00007FF87A591000-memory.dmp
memory/5680-155-0x000001FDDD4B0000-0x000001FDDD4B6000-memory.dmp
memory/5680-105-0x0000000073C70000-0x0000000073C84000-memory.dmp
memory/5680-100-0x00007FF887910000-0x00007FF887AAF000-memory.dmp
memory/5680-148-0x000001FDDD490000-0x000001FDDD49C000-memory.dmp
memory/5680-147-0x000001FDDD480000-0x000001FDDD48C000-memory.dmp
memory/5680-146-0x000001FDDC4A0000-0x000001FDDC4AB000-memory.dmp
memory/5680-97-0x0000000073C90000-0x0000000073CAE000-memory.dmp
memory/5680-136-0x000001FDDC490000-0x000001FDDC496000-memory.dmp
memory/5680-95-0x0000000073CB0000-0x0000000073CD5000-memory.dmp
memory/5680-91-0x0000000073D90000-0x0000000074108000-memory.dmp
memory/5680-201-0x0000000073D90000-0x0000000074108000-memory.dmp
memory/5680-206-0x000001FDD9460000-0x000001FDD946C000-memory.dmp
memory/5680-203-0x000001FDDB060000-0x000001FDDB3B5000-memory.dmp