Analysis
-
max time kernel
57s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
19-03-2023 16:51
General
-
Target
Nitro Labs Free.exe
-
Size
77.9MB
-
MD5
367f953c72b57e764286aca5943642fc
-
SHA1
56c0f48c15edcd18db60887e80becfeda1e40bce
-
SHA256
c7262e7cc23257bd4bdbf84e1d9a196b07fa7715172d51164f0bb69f94aa5384
-
SHA512
39a6045ddd45de85f3fdca1624595c1094573ddf37b2e61573cbb8d91f889d961d72ac742b60bc133862852d9cb8d3ae94433fdebed5789e2a8131eb56cf3196
-
SSDEEP
1572864:76+yrqzJlqMilh1ap+9It8wG5ABUmG3JS2XS03HRrLZ:75zJq6+GpGoG5S2CuRrLZ
Score
7/10
Malware Config
Signatures
-
Drops startup file 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Nitro Labs Free.exe"C:\Users\Admin\AppData\Local\Temp\Nitro Labs Free.exe"1⤵
- Drops startup file
-
C:\Windows\explorer.exe"C:\Windows\explorer.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x4f41⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.3MB
-
Filesize
63.8MB
-
Filesize
88KB
-
Filesize
92KB
-
Filesize
64KB