Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3nmap-7.60/...32.dll
windows7-x64
1nmap-7.60/...32.dll
windows10-2004-x64
1nmap-7.60/libssh2.dll
windows7-x64
3nmap-7.60/libssh2.dll
windows10-2004-x64
3nmap-7.60/ncat.exe
windows7-x64
1nmap-7.60/ncat.exe
windows10-2004-x64
1nmap-7.60/ndiff.bat
windows7-x64
1nmap-7.60/ndiff.bat
windows10-2004-x64
1nmap-7.60/ndiff.py
ubuntu-18.04-amd64
1nmap-7.60/ndiff.py
debian-9-armhf
1nmap-7.60/ndiff.py
debian-9-mips
1nmap-7.60/ndiff.py
debian-9-mipsel
1nmap-7.60/...te.exe
windows7-x64
1nmap-7.60/...te.exe
windows10-2004-x64
1nmap-7.60/nmap.exe
windows7-x64
1nmap-7.60/nmap.exe
windows10-2004-x64
1nmap-7.60/...93.exe
windows7-x64
7nmap-7.60/...93.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3DiagReport.bat
windows7-x64
1DiagReport.bat
windows10-2004-x64
1DiagReport.ps1
windows7-x64
1DiagReport.ps1
windows10-2004-x64
1NPFInstall.exe
windows7-x64
4NPFInstall.exe
windows10-2004-x64
4NPFInstall2.exe
windows7-x64
4NPFInstall2.exe
windows10-2004-x64
4nmap-7.60/nping.exe
windows7-x64
1nmap-7.60/nping.exe
windows10-2004-x64
1Analysis
-
max time kernel
11s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240226-en -
resource tags
arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
20/04/2024, 06:27
Static task
static1
Behavioral task
behavioral1
Sample
nmap-7.60/libeay32.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
nmap-7.60/libeay32.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
nmap-7.60/libssh2.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
nmap-7.60/libssh2.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
nmap-7.60/ncat.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
nmap-7.60/ncat.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
nmap-7.60/ndiff.bat
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
nmap-7.60/ndiff.bat
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
nmap-7.60/ndiff.py
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral10
Sample
nmap-7.60/ndiff.py
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral11
Sample
nmap-7.60/ndiff.py
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral12
Sample
nmap-7.60/ndiff.py
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral13
Sample
nmap-7.60/nmap-update.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
nmap-7.60/nmap-update.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
nmap-7.60/nmap.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
nmap-7.60/nmap.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral17
Sample
nmap-7.60/npcap-0.93.exe
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
nmap-7.60/npcap-0.93.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240215-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240220-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral23
Sample
DiagReport.bat
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
DiagReport.bat
Resource
win10v2004-20240412-en
Behavioral task
behavioral25
Sample
DiagReport.ps1
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
DiagReport.ps1
Resource
win10v2004-20240412-en
Behavioral task
behavioral27
Sample
NPFInstall.exe
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
NPFInstall.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
NPFInstall2.exe
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
NPFInstall2.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral31
Sample
nmap-7.60/nping.exe
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
nmap-7.60/nping.exe
Resource
win10v2004-20240412-en
General
-
Target
nmap-7.60/ndiff.py
-
Size
53KB
-
MD5
0bfe73c8929520a4193a43e72f99a737
-
SHA1
e081b0141a3442b399f9b86941c087b6af7349bd
-
SHA256
ccb7db928f97d9619948c65a602cee20fc0d4ed37016993023eead0948fe7429
-
SHA512
e18c4754e30448649c1509594bf48945a1735519cf1daa07342379f6d4bfd9ac6aca57d575d14dd778b3a3b23290875c44328c621a4d5d67a245d2d64a90ad94
-
SSDEEP
1536:WZdFd8Ydgk7DZi7puMxJOtpahiifEDyFj86:6dFd8Cg8i7puxtpahiifQyFj86
Malware Config
Signatures
Processes
-
/tmp/nmap-7.60/ndiff.py/tmp/nmap-7.60/ndiff.py1⤵PID:696
-
/usr/local/sbin/pythonpython /tmp/nmap-7.60/ndiff.py1⤵PID:696
-
/usr/local/bin/pythonpython /tmp/nmap-7.60/ndiff.py1⤵PID:696
-
/usr/sbin/pythonpython /tmp/nmap-7.60/ndiff.py1⤵PID:696
-
/usr/bin/pythonpython /tmp/nmap-7.60/ndiff.py1⤵PID:696