4de3c9059ad7bba0d41c6884ecb885638dd0860bc7712f1f6367bb75f4fd2307 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 01:06

Sharing

Report Analysis Logs

General

Target

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/Server.exe
Size

150KB
MD5

8ee6cfa5124a73f0e61d602ea7878863
SHA1

fbdff1a9009c2df072d74699f97700ccf2356ce7
SHA256

37df8b661f2ac4bf71ff9ef424de495813468294a4d88d682c45da1333859aa4
SHA512

da86a1e56e181c03ed7728b0cbbc9c516bdbe130361f2e74364a14d7686e148591dc272c4f5408d3f3f9e1e3d171a32c2af10927f46c0153e1d9b7e0c8997089
SSDEEP

3072:VLhz+8pIFc/i3bJ1c2kHWuVx1cep3a9xk9knBq:7z+n3bQHWCx1cepK9xJn

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\NingaliNET-RAT 1.0.2.1\NingaliNET 1.0.2.1\Plugins\Server.exe
"C:\Users\Admin\AppData\Local\Temp\NingaliNET-RAT 1.0.2.1\NingaliNET 1.0.2.1\Plugins\Server.exe"
1⤵
PID:1424

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1424-0-0x0000000074681000-0x0000000074682000-memory.dmp

Filesize
4KB

Download
memory/1424-1-0x0000000074680000-0x0000000074C2B000-memory.dmp

Filesize
5.7MB

Download
memory/1424-2-0x0000000074680000-0x0000000074C2B000-memory.dmp

Filesize
5.7MB

Download
memory/1424-3-0x0000000074680000-0x0000000074C2B000-memory.dmp

Filesize
5.7MB

Download
memory/1424-4-0x0000000074680000-0x0000000074C2B000-memory.dmp

Filesize
5.7MB

Download
memory/1424-5-0x0000000074680000-0x0000000074C2B000-memory.dmp

Filesize
5.7MB

Download
memory/1424-6-0x0000000074680000-0x0000000074C2B000-memory.dmp

Filesize
5.7MB

Download
memory/1424-7-0x0000000074680000-0x0000000074C2B000-memory.dmp

Filesize
5.7MB

Download