Overview
overview
10Static
static
10NiptuneRAT...AT.exe
windows7-x64
1NiptuneRAT...AT.exe
windows10-2004-x64
10NiptuneRAT...oG.dll
windows7-x64
1NiptuneRAT...oG.dll
windows10-2004-x64
1NiptuneRAT...uJ.dll
windows7-x64
1NiptuneRAT...uJ.dll
windows10-2004-x64
1NiptuneRAT...Pn.exe
windows7-x64
10NiptuneRAT...Pn.exe
windows10-2004-x64
10NiptuneRAT...io.dll
windows7-x64
1NiptuneRAT...io.dll
windows10-2004-x64
1NiptuneRAT...LC.dll
windows7-x64
1NiptuneRAT...LC.dll
windows10-2004-x64
1NiptuneRAT...wp.dll
windows7-x64
1NiptuneRAT...wp.dll
windows10-2004-x64
1NiptuneRAT...uZ.dll
windows7-x64
1NiptuneRAT...uZ.dll
windows10-2004-x64
1NiptuneRAT...WP.dll
windows7-x64
1NiptuneRAT...WP.dll
windows10-2004-x64
1NiptuneRAT...Hs.dll
windows7-x64
1NiptuneRAT...Hs.dll
windows10-2004-x64
1NiptuneRAT...TS.dll
windows7-x64
1NiptuneRAT...TS.dll
windows10-2004-x64
1NiptuneRAT...ry.dll
windows7-x64
1NiptuneRAT...ry.dll
windows10-2004-x64
1NiptuneRAT...xj.dll
windows7-x64
1NiptuneRAT...xj.dll
windows10-2004-x64
1NiptuneRAT...ng.dll
windows7-x64
1NiptuneRAT...ng.dll
windows10-2004-x64
1NiptuneRAT....3.dll
windows7-x64
1NiptuneRAT....3.dll
windows10-2004-x64
1NiptuneRAT...on.dll
windows7-x64
1NiptuneRAT...on.dll
windows10-2004-x64
1Analysis
-
max time kernel
165s -
max time network
174s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
19-03-2024 01:45
Behavioral task
behavioral1
Sample
NiptuneRAT-main/NiptuneRAT.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
NiptuneRAT-main/NiptuneRAT.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
NiptuneRAT-main/Plugins/0guo3zbo66fqoG.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
NiptuneRAT-main/Plugins/0guo3zbo66fqoG.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
NiptuneRAT-main/Plugins/59Zp7paEHDF7luJ.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
NiptuneRAT-main/Plugins/59Zp7paEHDF7luJ.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
NiptuneRAT-main/Plugins/9Ood5SWkbwPn.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
NiptuneRAT-main/Plugins/9Ood5SWkbwPn.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
NiptuneRAT-main/Plugins/Audio.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
NiptuneRAT-main/Plugins/Audio.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
NiptuneRAT-main/Plugins/EVa7gBMKoaHmLC.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
NiptuneRAT-main/Plugins/EVa7gBMKoaHmLC.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
NiptuneRAT-main/Plugins/FBSyChwp.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
NiptuneRAT-main/Plugins/FBSyChwp.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
NiptuneRAT-main/Plugins/G3nl0mDcABnDuZ.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
NiptuneRAT-main/Plugins/G3nl0mDcABnDuZ.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
NiptuneRAT-main/Plugins/K8oCBS3ThnW0WP.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
NiptuneRAT-main/Plugins/K8oCBS3ThnW0WP.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
NiptuneRAT-main/Plugins/KNTmoSnG.AnarHs.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
NiptuneRAT-main/Plugins/KNTmoSnG.AnarHs.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
NiptuneRAT-main/Plugins/PK0TcnqTGFagQTS.dll
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
NiptuneRAT-main/Plugins/PK0TcnqTGFagQTS.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
NiptuneRAT-main/Plugins/Recovery.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
NiptuneRAT-main/Plugins/Recovery.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
NiptuneRAT-main/Plugins/RssCnLKcGRxj.dll
Resource
win7-20240215-en
Behavioral task
behavioral26
Sample
NiptuneRAT-main/Plugins/RssCnLKcGRxj.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
NiptuneRAT-main/Plugins/Tools/Bunifu.Licensing.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
NiptuneRAT-main/Plugins/Tools/Bunifu.Licensing.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
NiptuneRAT-main/Plugins/Tools/Bunifu.UI.WinForms.1.5.3.dll
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
NiptuneRAT-main/Plugins/Tools/Bunifu.UI.WinForms.1.5.3.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
NiptuneRAT-main/Plugins/Tools/Bunifu.UI.WinForms.BunifuButton.dll
Resource
win7-20240215-en
Behavioral task
behavioral32
Sample
NiptuneRAT-main/Plugins/Tools/Bunifu.UI.WinForms.BunifuButton.dll
Resource
win10v2004-20240226-en
General
-
Target
NiptuneRAT-main/Plugins/FBSyChwp.dll
-
Size
170KB
-
MD5
0d41ccfaa8e7ef96248b8270d1a44d08
-
SHA1
6ee22bdb91d3a18e0b45b6590eb69bc9a0b02326
-
SHA256
0ea38d0d964815e2b84748a78bd5a829ae01586478e5f17b976f1ae763c8dec3
-
SHA512
a0f236f6dbeb1763fb1c198616de65b907a3a5edf7ed9435c2ad0b5826d84e9d2f25e96aba4e8b681ef495612cf0e04e929427a92d332164ace89e797bcb0e0e
-
SSDEEP
3072:OXwOuoHBhyYr+x5IA+1gUtaEKJ8px4e1hkamm9RyxLeN/dIfMU+:awOuYr05T+KUtaEKJ8px4e1RmqRydeNd
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\NiptuneRAT-main\Plugins\FBSyChwp.dll,#11⤵PID:2436
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4048 --field-trial-handle=3060,i,1774866140584649235,8085848018931772189,262144 --variations-seed-version /prefetch:81⤵PID:5036