Analysis
-
max time kernel
37s -
max time network
31s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
03/10/2024, 22:56
Static task
static1
Behavioral task
behavioral1
Sample
nig.exe
Resource
win11-20240802-en
General
-
Target
nig.exe
-
Size
7.8MB
-
MD5
97db941a8b4332bbf6ad17d647552a83
-
SHA1
28389516a3fd5968af8f7fcd16ddf636b9dbfaa3
-
SHA256
5841a236dbbe556290ad73bf0f7d4d4c3bc00b7331097b5f5c1d9b4724f71a83
-
SHA512
6f3da686dfd74be8c563dc0c050c2ab7531b61b154b2c2fa7e404721c7c99046ced113bcfdd96a0c7529ba165c4aa187f58425cd56bb94b44de316f672d91b39
-
SSDEEP
98304:g1mkI5W1cpv/e7ET+SVhQi7ENd09027mCXBqWeted6:gACYv/PjQi7A09mkjekd
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\nig.exe"C:\Users\Admin\AppData\Local\Temp\nig.exe"1⤵PID:1944
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4500
-
C:\Windows\System32\DataExchangeHost.exeC:\Windows\System32\DataExchangeHost.exe -Embedding1⤵PID:4460
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24KB
MD5a51464e41d75b2aa2b00ca31ea2ce7eb
SHA15b94362ac6a23c5aba706e8bfd11a5d8bab6097d
SHA25616d5506b6663085b1acd80644ffa5363c158e390da67ed31298b85ddf0ad353f
SHA512b2a09d52c211e7100e3e68d88c13394c64f23bf2ec3ca25b109ffb1e1a96a054f0e0d25d2f2a0c2145616eabc88c51d63023cef5faa7b49129d020f67ab0b1ff