General
-
Target
Nitro_Generator.exe
-
Size
28.7MB
-
Sample
220519-xtsx3adgdm
-
MD5
1e70d097a4c58498a27e5512279c117f
-
SHA1
cd03b3cc787da79df9c768083caac41017ed9bb4
-
SHA256
2cec1a7d0eca001e5413f3457a26cd866494066a0264e611e0a02b3a071b017c
-
SHA512
0c14eca699fe8ae5360dd287a5ba4fcff7877012eb01e892d4f19c28e3f83f4e0e4d25a692f5a18c0fe26da5de358346839006f3352a27629879509cddfb9ed0
Static task
static1
Behavioral task
behavioral1
Sample
Nitro_Generator.exe
Resource
win7-20220414-en
Malware Config
Targets
-
-
Target
Nitro_Generator.exe
-
Size
28.7MB
-
MD5
1e70d097a4c58498a27e5512279c117f
-
SHA1
cd03b3cc787da79df9c768083caac41017ed9bb4
-
SHA256
2cec1a7d0eca001e5413f3457a26cd866494066a0264e611e0a02b3a071b017c
-
SHA512
0c14eca699fe8ae5360dd287a5ba4fcff7877012eb01e892d4f19c28e3f83f4e0e4d25a692f5a18c0fe26da5de358346839006f3352a27629879509cddfb9ed0
-
Drops startup file
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-