4de3c9059ad7bba0d41c6884ecb885638dd0860bc7712f1f6367bb75f4fd2307 | Triage

Submit
Reports

Overview

overview

Static

static

3

NingaliNET...or.dll

windows7-x64

1

NingaliNET...or.dll

windows10-2004-x64

1

NingaliNET...ib.dll

windows7-x64

1

NingaliNET...ib.dll

windows10-2004-x64

1

NingaliNET...il.dll

windows7-x64

1

NingaliNET...il.dll

windows10-2004-x64

1

NingaliNET...m].exe

windows7-x64

NingaliNET...m].exe

windows10-2004-x64

NingaliNET...l].exe

windows7-x64

1

NingaliNET...l].exe

windows10-2004-x64

1

NingaliNET...er.exe

windows7-x64

1

NingaliNET...er.exe

windows10-2004-x64

1

NingaliNET...er.exe

windows7-x64

1

NingaliNET...er.exe

windows10-2004-x64

1

NingaliNET...nt.exe

windows7-x64

1

NingaliNET...nt.exe

windows10-2004-x64

1

NingaliNET...al.exe

windows7-x64

1

NingaliNET...al.exe

windows10-2004-x64

1

NingaliNET...es.exe

windows7-x64

1

NingaliNET...es.exe

windows10-2004-x64

1

NingaliNET...er.dll

windows7-x64

1

NingaliNET...er.dll

windows10-2004-x64

1

NingaliNET...np.dll

windows7-x64

1

NingaliNET...np.dll

windows10-2004-x64

1

Analysis

max time kernel
134s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 01:06

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/IconInjector.dll

Resource

win7-20240215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/IconInjector.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Interop.NATUPNPLib.dll

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Interop.NATUPNPLib.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Mono.Cecil.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Mono.Cecil.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/NingaliNET Cracked [VersionPremium].exe

Resource

win7-20240221-en

darkcomet a1client rat trojan

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral8

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/NingaliNET Cracked [VersionPremium].exe

Resource

win10v2004-20240226-en

darkcomet a1client rat trojan

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral9

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/NingaliNET [Original].exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/NingaliNET [Original].exe

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/Filebinder.exe

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/Filebinder.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/Server.exe

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/Server.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/dlentrypoint.exe

Resource

win7-20240215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/dlentrypoint.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/dlnormal.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/dlnormal.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Res/res.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Res/res.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/SocketServer.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/SocketServer.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/upnp.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/upnp.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/Filebinder.exe
Size

14KB
MD5

f4c7f8ef90e34c3e9f19d1366db79f03
SHA1

3ee1d1fafa5444b376c729279939a64a69caa544
SHA256

3ab5e13d7c560937ec3e1f764fb728bc81d22a177c695507065e09ae12d98894
SHA512

82246a0b218d2fda14fcb358d5abc58a8d7b3c57cffad22c198f2bfdabc7465848940ef9b6a627a403197bf1a635feb2bec098725f9a2ef91b217f0bb466c78e
SSDEEP

384:j6FMwWPfLQV42kuGCy4ju7LRB3u0+L6JOCzYcCe:uFHWPfXCEJvzYcCe

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\NingaliNET-RAT 1.0.2.1\NingaliNET 1.0.2.1\Plugins\Filebinder.exe
"C:\Users\Admin\AppData\Local\Temp\NingaliNET-RAT 1.0.2.1\NingaliNET 1.0.2.1\Plugins\Filebinder.exe"
1⤵
PID:900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/900-0-0x00007FF825A15000-0x00007FF825A16000-memory.dmp

Filesize
4KB

Download
memory/900-1-0x000000001C010000-0x000000001C4DE000-memory.dmp

Filesize
4.8MB

Download
memory/900-3-0x000000001C580000-0x000000001C61C000-memory.dmp

Filesize
624KB

Download
memory/900-2-0x00007FF825760000-0x00007FF826101000-memory.dmp

Filesize
9.6MB

Download
memory/900-4-0x000000001C7D0000-0x000000001C876000-memory.dmp

Filesize
664KB

Download
memory/900-5-0x00007FF825760000-0x00007FF826101000-memory.dmp

Filesize
9.6MB

Download
memory/900-6-0x0000000001570000-0x0000000001578000-memory.dmp

Filesize
32KB

Download
memory/900-7-0x00007FF825760000-0x00007FF826101000-memory.dmp

Filesize
9.6MB

Download
memory/900-9-0x00007FF825760000-0x00007FF826101000-memory.dmp

Filesize
9.6MB

Download

© 2018-2024

Terms | Privacy