Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    nitro-generator.exe

  • Size

    13.9MB

  • Sample

    230206-a2cjqabe42

  • MD5

    48e21bc8cac754391169f63641a5f247

  • SHA1

    70b78a7c09e6aad495bbe643de30c4024ce0a48b

  • SHA256

    47794c06386b9c1a4b2fb65dc0bb854ec63dc2af64d97814ec36f08b6d13f5b8

  • SHA512

    09390d33e22a541bdda62105d29aa9bd191fe747ad8e438cb70da9af83ede44dd06d3d5b63cbc59554e4b0bbadb0baabf0d17fa63060432ab453c7401e7a1663

  • SSDEEP

    196608:OUXZAlqpb7KX/x1HhyehNJm3AqdKDnO8NpkSgsAGKaR2n9Ou1mytu9mEyvFdNOAX:1ZAlqYXJBb/m3pgDOEkSgsvEM+uQnHJ

Score
7/10

Malware Config

Targets

    • Target

      nitro-generator.exe

    • Size

      13.9MB

    • MD5

      48e21bc8cac754391169f63641a5f247

    • SHA1

      70b78a7c09e6aad495bbe643de30c4024ce0a48b

    • SHA256

      47794c06386b9c1a4b2fb65dc0bb854ec63dc2af64d97814ec36f08b6d13f5b8

    • SHA512

      09390d33e22a541bdda62105d29aa9bd191fe747ad8e438cb70da9af83ede44dd06d3d5b63cbc59554e4b0bbadb0baabf0d17fa63060432ab453c7401e7a1663

    • SSDEEP

      196608:OUXZAlqpb7KX/x1HhyehNJm3AqdKDnO8NpkSgsAGKaR2n9Ou1mytu9mEyvFdNOAX:1ZAlqYXJBb/m3pgDOEkSgsvEM+uQnHJ

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks