4de3c9059ad7bba0d41c6884ecb885638dd0860bc7712f1f6367bb75f4fd2307 | Triage

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 01:06

Sharing

Report Analysis Logs

General

Target

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/Filebinder.exe
Size

14KB
MD5

f4c7f8ef90e34c3e9f19d1366db79f03
SHA1

3ee1d1fafa5444b376c729279939a64a69caa544
SHA256

3ab5e13d7c560937ec3e1f764fb728bc81d22a177c695507065e09ae12d98894
SHA512

82246a0b218d2fda14fcb358d5abc58a8d7b3c57cffad22c198f2bfdabc7465848940ef9b6a627a403197bf1a635feb2bec098725f9a2ef91b217f0bb466c78e
SSDEEP

384:j6FMwWPfLQV42kuGCy4ju7LRB3u0+L6JOCzYcCe:uFHWPfXCEJvzYcCe

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\NingaliNET-RAT 1.0.2.1\NingaliNET 1.0.2.1\Plugins\Filebinder.exe
"C:\Users\Admin\AppData\Local\Temp\NingaliNET-RAT 1.0.2.1\NingaliNET 1.0.2.1\Plugins\Filebinder.exe"
1⤵
PID:2392

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2392-0-0x000007FEF649E000-0x000007FEF649F000-memory.dmp

Filesize
4KB

Download
memory/2392-1-0x000007FEF61E0000-0x000007FEF6B7D000-memory.dmp

Filesize
9.6MB

Download
memory/2392-2-0x000007FEF61E0000-0x000007FEF6B7D000-memory.dmp

Filesize
9.6MB

Download
memory/2392-3-0x000007FEF61E0000-0x000007FEF6B7D000-memory.dmp

Filesize
9.6MB

Download
memory/2392-4-0x000007FEF61E0000-0x000007FEF6B7D000-memory.dmp

Filesize
9.6MB

Download