Overview

overview

7

Static

static

7

Danger/Danger.exe

windows7-x64

3

Danger/Danger.exe

windows10-2004-x64

3

Danger/Danger.exe.lnk

windows7-x64

3

Danger/Danger.exe.lnk

windows10-2004-x64

7

Danger/cmdbkg.exe

windows7-x64

1

Danger/cmdbkg.exe

windows10-2004-x64

1

cmdbkg.exe

windows7-x64

1

cmdbkg.exe

windows10-2004-x64

1

makeall.bat

windows7-x64

1

makeall.bat

windows10-2004-x64

1

Danger/makeall.bat

windows7-x64

1

Danger/makeall.bat

windows10-2004-x64

1

Danger/nmap.exe

windows7-x64

4

Danger/nmap.exe

windows10-2004-x64

4

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...71.exe

windows7-x64

4

$PLUGINSDI...71.exe

windows10-2004-x64

4

$PLUGINSDI...86.exe

windows7-x64

7

$PLUGINSDI...86.exe

windows10-2004-x64

7

Uninstall.exe

windows7-x64

4

Uninstall.exe

windows10-2004-x64

4

ncat.exe

windows7-x64

1

ncat.exe

windows10-2004-x64

1

ndiff.exe

windows7-x64

1

ndiff.exe

windows10-2004-x64

1

nmap.exe

windows7-x64

1

nmap.exe

windows10-2004-x64

1

nping.exe

windows7-x64

1

nping.exe

windows10-2004-x64

1

nse_main.js

windows7-x64

1

nse_main.js

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02-03-2024 12:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ndiff.exe

  • Size

    30KB

  • MD5

    641c20acd8719456d1480ac90122d5ee

  • SHA1

    95ba489a1c112589ad695b8c96f6569e6665ac08

  • SHA256

    0ba1295afc0e5205541777ff5bd565e46ab40c5b9c4f425bbfceb800d306d8cd

  • SHA512

    7473e0ea9345dce9d93ee4074da1537c8cd39813774a3776c99e796b3c8d90ec1e9c8c26924dee588e08f7fa27e59452add51635e9e68c214df3ac8cca25c7a5

  • SSDEEP

    384:yYn2vPeqUfmEZ+nUn0fJCfMdXWgugoL2R3dwmgo6rEqZmZsHLsL4i/8E9VF0NyX7:yxPeqYmEb0kUX1dwzrV1aeE1

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\ndiff.exe
    "C:\Users\Admin\AppData\Local\Temp\ndiff.exe"
    1⤵
      PID:2908

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads