Overview

overview

7

Static

static

3

ng2-raider...ain.py

windows10-1703-x64

3

ng2-raider...g2.exe

windows10-1703-x64

7

ng2-raider...rt.bat

windows10-1703-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ng2-raider-main.zip

  • Size

    7.8MB

  • Sample

    240701-f2qdgaxcrf

  • MD5

    6db7c9a50555b79ab4fa5a7e68965acb

  • SHA1

    081423388e2452a87b4a31aa9b4378b89639b374

  • SHA256

    625a73a544830cdf20dd0d945cb2382269df737d69add344a6b5e9c3f876603a

  • SHA512

    c36da143daea900e6ba410d5fe533449a9bb3da52cae844774fcf14aa6c84f70098c2d0747519e0406544ef8cbec25673540491e6b9a4fa7fe6ee3b475f221bc

  • SSDEEP

    196608:NC0jKehYEwNS+UT+2Yvd/cHDHJJc2UeI7:2eOvS+JKV22jS

Score
7/10
pyinstaller

Malware Config

Targets

    • Target

      ng2-raider-main/main.py

    • Size

      187KB

    • MD5

      34e0f1004a864d96dfade70e923fb390

    • SHA1

      9a049a6b9d232280232b3b50ad9db27d858b7b08

    • SHA256

      d441cc963fd6f75a8858affdee5a87afff4bb9f3e0da7c30514fd8500cf072b8

    • SHA512

      99908c160efebe46af43d27d903c0385d54ce20f7063ef496e697c6d10e8cc3b0f923ca0bbb52133b5a153b2dfa108daeee156fb04a9d386d0db9f7b2a87c286

    • SSDEEP

      24:F++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++H:X

    Score
    3/10
    behavioral1

    • Target

      ng2-raider-main/ng2.exe

    • Size

      7.7MB

    • MD5

      1ed81d14ac9cb9a941885ead5e75119f

    • SHA1

      249de5247863f91c0806e881df842bb3ef2a7b22

    • SHA256

      cc5b00bfaadae53c94df1e285207478bf25a155d30a35bd328b98cec59337882

    • SHA512

      4971cf718d190be6ed91a1d622998fd385c742173bcf655c336238bc2dd384586da8af81a9819b801fd9fe5ef529392fdbd436cb0c6051f1b5e0319aabb1c1aa

    • SSDEEP

      196608:P84GCZ4FMIZETSwjPePdrQJ/BsRnPCNRQ:049QETSwvJO6e

    Score
    7/10

    • Loads dropped DLL

    behavioral2

    • Target

      ng2-raider-main/start.bat

    • Size

      54B

    • MD5

      47e92baddf129a8d89792bc8937d26ab

    • SHA1

      d0c067a10e674336d5595f7ff4383e8b078460b8

    • SHA256

      e07df02ef6d0c6fbdb5fbfb4bde3be4a5581a83c3da3fb666669f2203b3e18fc

    • SHA512

      db4a701e441b1255998bb283f79e1cf3e80d631cfb31da934bf09d9c9a69951a130671952ab3368d1d53e6ec673e3e2c4b3dd5576042999a2e46b3e2a5ae81a5

    Score
    1/10
    behavioral3

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks