Overview

overview

10

Static

static

10

NiptuneRAT...AT.exe

windows7-x64

1

NiptuneRAT...AT.exe

windows10-2004-x64

10

NiptuneRAT...oG.dll

windows7-x64

1

NiptuneRAT...oG.dll

windows10-2004-x64

1

NiptuneRAT...uJ.dll

windows7-x64

1

NiptuneRAT...uJ.dll

windows10-2004-x64

1

NiptuneRAT...Pn.exe

windows7-x64

10

NiptuneRAT...Pn.exe

windows10-2004-x64

10

NiptuneRAT...io.dll

windows7-x64

1

NiptuneRAT...io.dll

windows10-2004-x64

1

NiptuneRAT...LC.dll

windows7-x64

1

NiptuneRAT...LC.dll

windows10-2004-x64

1

NiptuneRAT...wp.dll

windows7-x64

1

NiptuneRAT...wp.dll

windows10-2004-x64

1

NiptuneRAT...uZ.dll

windows7-x64

1

NiptuneRAT...uZ.dll

windows10-2004-x64

1

NiptuneRAT...WP.dll

windows7-x64

1

NiptuneRAT...WP.dll

windows10-2004-x64

1

NiptuneRAT...Hs.dll

windows7-x64

1

NiptuneRAT...Hs.dll

windows10-2004-x64

1

NiptuneRAT...TS.dll

windows7-x64

1

NiptuneRAT...TS.dll

windows10-2004-x64

1

NiptuneRAT...ry.dll

windows7-x64

1

NiptuneRAT...ry.dll

windows10-2004-x64

1

NiptuneRAT...xj.dll

windows7-x64

1

NiptuneRAT...xj.dll

windows10-2004-x64

1

NiptuneRAT...ng.dll

windows7-x64

1

NiptuneRAT...ng.dll

windows10-2004-x64

1

NiptuneRAT....3.dll

windows7-x64

1

NiptuneRAT....3.dll

windows10-2004-x64

1

NiptuneRAT...on.dll

windows7-x64

1

NiptuneRAT...on.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    139s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-03-2024 01:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NiptuneRAT-main/Plugins/9Ood5SWkbwPn.exe

  • Size

    138KB

  • MD5

    2cf2efcc0e1d910d2d9c933ca73055d0

  • SHA1

    3bb08f4532f80bf0cd5a36f26393ba00beadb8eb

  • SHA256

    2475c46eba856424c41cf41db71fd5d6089e8be9031b35279f051da760aa216f

  • SHA512

    e16ca929bf2c7654251b02946fa7954f89971a27750e05c502acede063a55d88df16fb297c40c7bf54e04ea173cb6c3527e65ca98ad2280543e00e9ef6fa9390

  • SSDEEP

    3072:ubvh/X2z7Bqh1v59Y08mAjs0Ltel+qOeJHlpV8b+Y/Yi:ubvhPi7BqjjYHdrqkL/

Score
10/10
arrowratidentifierrat

Malware Config

Extracted

Family

arrowrat

Botnet

identifier

C2

IP:PORT

Mutex

mutex

Signatures

  • ArrowRat

    Remote access tool with various capabilities first seen in late 2021.

    ratarrowrat

Processes

  • C:\Users\Admin\AppData\Local\Temp\NiptuneRAT-main\Plugins\9Ood5SWkbwPn.exe
    "C:\Users\Admin\AppData\Local\Temp\NiptuneRAT-main\Plugins\9Ood5SWkbwPn.exe"
    1⤵
      PID:3048

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3048-0-0x0000014BA6690000-0x0000014BA66B8000-memory.dmp

      Filesize

      160KB

      Download

    • memory/3048-2-0x00007FF848F90000-0x00007FF849A51000-memory.dmp

      Filesize

      10.8MB

      Download

    • memory/3048-3-0x00007FF848F90000-0x00007FF849A51000-memory.dmp

      Filesize

      10.8MB

      Download