4de3c9059ad7bba0d41c6884ecb885638dd0860bc7712f1f6367bb75f4fd2307

Submit
Reports

Overview

overview

Static

static

NingaliNET...or.dll

windows7-x64

NingaliNET...or.dll

windows10-2004-x64

NingaliNET...ib.dll

windows7-x64

NingaliNET...ib.dll

windows10-2004-x64

NingaliNET...il.dll

windows7-x64

NingaliNET...il.dll

windows10-2004-x64

NingaliNET...m].exe

windows7-x64

NingaliNET...m].exe

windows10-2004-x64

NingaliNET...l].exe

windows7-x64

NingaliNET...l].exe

windows10-2004-x64

NingaliNET...er.exe

windows7-x64

NingaliNET...er.exe

windows10-2004-x64

NingaliNET...er.exe

windows7-x64

NingaliNET...er.exe

windows10-2004-x64

NingaliNET...nt.exe

windows7-x64

NingaliNET...nt.exe

windows10-2004-x64

NingaliNET...al.exe

windows7-x64

NingaliNET...al.exe

windows10-2004-x64

NingaliNET...es.exe

windows7-x64

NingaliNET...es.exe

windows10-2004-x64

NingaliNET...er.dll

windows7-x64

NingaliNET...er.dll

windows10-2004-x64

NingaliNET...np.dll

windows7-x64

NingaliNET...np.dll

windows10-2004-x64

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 01:06

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/IconInjector.dll

Resource

win7-20240215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/IconInjector.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Interop.NATUPNPLib.dll

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Interop.NATUPNPLib.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Mono.Cecil.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Mono.Cecil.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/NingaliNET Cracked [VersionPremium].exe

Resource

win7-20240221-en

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral8

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/NingaliNET Cracked [VersionPremium].exe

Resource

win10v2004-20240226-en

darkcomet a1client rat trojan

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral9

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/NingaliNET [Original].exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/NingaliNET [Original].exe

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/Filebinder.exe

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/Filebinder.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/Server.exe

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/Server.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/dlentrypoint.exe

Resource

win7-20240215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/dlentrypoint.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/dlnormal.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Plugins/dlnormal.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Res/res.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Res/res.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/SocketServer.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/SocketServer.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/upnp.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/upnp.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

NingaliNET-RAT 1.0.2.1/NingaliNET 1.0.2.1/Interop.NATUPNPLib.dll
Size

7KB
MD5

8a24aa73080b46f93c4c9f3450fe43e5
SHA1

ed0d8edf55ea6b0d717813fd829e434eb3d63abb
SHA256

e45f7168be51641d43873f90ff538f9f7557755e911dc23783ff6a4028c30c25
SHA512

17325bab37fb2a0975ba3e3885a73f235e06f1634124743eca2c2c76e5f2d76fbb751ca8eccecbeef8bb6a9872970e44e6e5847adc54af1cf63dd6f9a5c3b13d
SSDEEP

96:CFinj09TiY5IxaUsyKY05YgZsXFn6cQkE8g8nIxqG0tVClW:mGEJIrKrYgZsd6wVIiX

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\NingaliNET-RAT 1.0.2.1\NingaliNET 1.0.2.1\Interop.NATUPNPLib.dll",#1
1⤵
PID:3032

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads