4de3c9059ad7bba0d41c6884ecb885638dd0860bc7712f1f6367bb75f4fd2307 | Triage

Analysis

max time kernel
150s
max time network
121s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 01:06

Sharing

Report Analysis Logs

General

Target

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/dlentrypoint.exe
Size

11KB
MD5

14960a1079f4ffbfb46f553cfc52ad09
SHA1

b3d18ffc2b1120d3a58c04d45bd3a404aceb8af3
SHA256

b047352ca4a417181e493c6f353eba94a0fce9d67507dc0f3d694b49b4fce6ef
SHA512

2bf999073f35df968d2c9bfc2189dbba163487c7287d1475dde998379bd20969d5140fbff7b6c01f9e7031871342a57ab1b215172bfd15dfac15b025dee0954c
SSDEEP

192:03WKyDozynM11XvrKclkpZmGnloYk4ONIDLR7fV0ovpptwiA:03WvooMnXvrKcl+y4u+LR7Zxp6iA

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\NingaliNET-RAT 1.0.2.1\NingaliNET 1.0.2.1\Plugins\dlentrypoint.exe
"C:\Users\Admin\AppData\Local\Temp\NingaliNET-RAT 1.0.2.1\NingaliNET 1.0.2.1\Plugins\dlentrypoint.exe"
1⤵
PID:2388

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2388-0-0x000007FEF5AB3000-0x000007FEF5AB4000-memory.dmp

Filesize
4KB

Download
memory/2388-1-0x0000000000360000-0x000000000036C000-memory.dmp

Filesize
48KB

Download
memory/2388-2-0x000007FEF5AB0000-0x000007FEF649C000-memory.dmp

Filesize
9.9MB

Download
memory/2388-3-0x000007FEF5AB3000-0x000007FEF5AB4000-memory.dmp

Filesize
4KB

Download
memory/2388-4-0x000007FEF5AB0000-0x000007FEF649C000-memory.dmp

Filesize
9.9MB

Download