b671f420afcc25cd5b00b9b32c7cbad7b0ad7410354a133f246469f7c0414016 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

NingaliNET...or.dll

windows7-x64

1

NingaliNET...or.dll

windows10-2004-x64

1

NingaliNET...ib.dll

windows7-x64

1

NingaliNET...ib.dll

windows10-2004-x64

1

NingaliNET...il.dll

windows7-x64

1

NingaliNET...il.dll

windows10-2004-x64

1

NingaliNET...ET.exe

windows7-x64

1

NingaliNET...ET.exe

windows10-2004-x64

1

NingaliNET...er.exe

windows7-x64

1

NingaliNET...er.exe

windows10-2004-x64

1

NingaliNET...er.exe

windows7-x64

1

NingaliNET...er.exe

windows10-2004-x64

1

NingaliNET...nt.exe

windows7-x64

1

NingaliNET...nt.exe

windows10-2004-x64

1

NingaliNET...al.exe

windows7-x64

1

NingaliNET...al.exe

windows10-2004-x64

1

NingaliNET...es.exe

windows7-x64

1

NingaliNET...es.exe

windows10-2004-x64

1

NingaliNET...er.exe

windows7-x64

7

NingaliNET...er.exe

windows10-2004-x64

7

NingaliNET...er.dll

windows7-x64

1

NingaliNET...er.dll

windows10-2004-x64

1

NingaliNET...er.rtf

windows7-x64

1

NingaliNET...er.rtf

windows10-2004-x64

1

NingaliNET...np.dll

windows7-x64

1

NingaliNET...np.dll

windows10-2004-x64

1

Analysis

max time kernel
150s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
05/05/2024, 19:36

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

NingaliNET 1.0.2.1/IconInjector.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

NingaliNET 1.0.2.1/IconInjector.dll

Resource

win10v2004-20240419-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

NingaliNET 1.0.2.1/Interop.NATUPNPLib.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

NingaliNET 1.0.2.1/Interop.NATUPNPLib.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

NingaliNET 1.0.2.1/Mono.Cecil.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

NingaliNET 1.0.2.1/Mono.Cecil.dll

Resource

win10v2004-20240419-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

NingaliNET 1.0.2.1/NingaliNET.exe

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

NingaliNET 1.0.2.1/NingaliNET.exe

Resource

win10v2004-20240419-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

NingaliNET 1.0.2.1/Plugins/Filebinder.exe

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

NingaliNET 1.0.2.1/Plugins/Filebinder.exe

Resource

win10v2004-20240419-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

NingaliNET 1.0.2.1/Plugins/Server.exe

Resource

win7-20240215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

NingaliNET 1.0.2.1/Plugins/Server.exe

Resource

win10v2004-20240419-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

NingaliNET 1.0.2.1/Plugins/dlentrypoint.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

NingaliNET 1.0.2.1/Plugins/dlentrypoint.exe

Resource

win10v2004-20240419-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

NingaliNET 1.0.2.1/Plugins/dlnormal.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

NingaliNET 1.0.2.1/Plugins/dlnormal.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

NingaliNET 1.0.2.1/Res/res.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

NingaliNET 1.0.2.1/Res/res.exe

Resource

win10v2004-20240419-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

NingaliNET 1.0.2.1/Server.exe

Resource

win7-20231129-en

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral20

Sample

NingaliNET 1.0.2.1/Server.exe

Resource

win10v2004-20240419-en

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral21

Sample

NingaliNET 1.0.2.1/SocketServer.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

NingaliNET 1.0.2.1/SocketServer.dll

Resource

win10v2004-20240419-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

NingaliNET 1.0.2.1/Users/SERVER_IE11WIN7_IEUser_5612398/Logger.rtf

Resource

win7-20240215-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

NingaliNET 1.0.2.1/Users/SERVER_IE11WIN7_IEUser_5612398/Logger.rtf

Resource

win10v2004-20240419-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

NingaliNET 1.0.2.1/upnp.dll

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

NingaliNET 1.0.2.1/upnp.dll

Resource

win10v2004-20240419-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

NingaliNET 1.0.2.1/Plugins/dlentrypoint.exe
Size

11KB
MD5

14960a1079f4ffbfb46f553cfc52ad09
SHA1

b3d18ffc2b1120d3a58c04d45bd3a404aceb8af3
SHA256

b047352ca4a417181e493c6f353eba94a0fce9d67507dc0f3d694b49b4fce6ef
SHA512

2bf999073f35df968d2c9bfc2189dbba163487c7287d1475dde998379bd20969d5140fbff7b6c01f9e7031871342a57ab1b215172bfd15dfac15b025dee0954c
SSDEEP

192:03WKyDozynM11XvrKclkpZmGnloYk4ONIDLR7fV0ovpptwiA:03WvooMnXvrKcl+y4u+LR7Zxp6iA

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\NingaliNET 1.0.2.1\Plugins\dlentrypoint.exe
"C:\Users\Admin\AppData\Local\Temp\NingaliNET 1.0.2.1\Plugins\dlentrypoint.exe"
1⤵
PID:2368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2368-0-0x00007FFA5EC53000-0x00007FFA5EC55000-memory.dmp

Filesize
8KB

Download
memory/2368-1-0x0000000000CB0000-0x0000000000CBC000-memory.dmp

Filesize
48KB

Download
memory/2368-2-0x00007FFA5EC50000-0x00007FFA5F711000-memory.dmp

Filesize
10.8MB

Download
memory/2368-3-0x00007FFA5EC53000-0x00007FFA5EC55000-memory.dmp

Filesize
8KB

Download
memory/2368-4-0x00007FFA5EC50000-0x00007FFA5F711000-memory.dmp

Filesize
10.8MB

Download

© 2018-2025

Terms | Privacy