General
-
Target
nitro_gen.exe
-
Size
22.3MB
-
Sample
230310-d43epsbe78
-
MD5
727fcfb8bb71b837eadf96d99214d634
-
SHA1
04825d0c02b3240d2384367e5401e7af3948060c
-
SHA256
c72a68f8a4bc0a74a63ed674f39da7196a8f1a9e878ac4c5baf87649e6d8f261
-
SHA512
6ee0bf01cd332884c4e0389c8a475247008db432f0f87a2885f79b8ef73202178e44d92bc8b5197b68148df5385b623633d2a579a4e51e497798041a470af9a5
-
SSDEEP
393216:3qPuYXJBlbtWp3EqO97nasi/m3pnDOEkSgsvbkyw5kc7mByksVtEn2m:6PuYXJBlcG3F8KyAzOr7OsV8N
Behavioral task
behavioral1
Sample
nitro_gen.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
nitro_gen.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
nitro_gen.exe
-
Size
22.3MB
-
MD5
727fcfb8bb71b837eadf96d99214d634
-
SHA1
04825d0c02b3240d2384367e5401e7af3948060c
-
SHA256
c72a68f8a4bc0a74a63ed674f39da7196a8f1a9e878ac4c5baf87649e6d8f261
-
SHA512
6ee0bf01cd332884c4e0389c8a475247008db432f0f87a2885f79b8ef73202178e44d92bc8b5197b68148df5385b623633d2a579a4e51e497798041a470af9a5
-
SSDEEP
393216:3qPuYXJBlbtWp3EqO97nasi/m3pnDOEkSgsvbkyw5kc7mByksVtEn2m:6PuYXJBlcG3F8KyAzOr7OsV8N
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-