Analysis

  • max time kernel
    82s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-03-2023 16:51

General

  • Target

    Nitro Labs Free.exe

  • Size

    77.9MB

  • MD5

    367f953c72b57e764286aca5943642fc

  • SHA1

    56c0f48c15edcd18db60887e80becfeda1e40bce

  • SHA256

    c7262e7cc23257bd4bdbf84e1d9a196b07fa7715172d51164f0bb69f94aa5384

  • SHA512

    39a6045ddd45de85f3fdca1624595c1094573ddf37b2e61573cbb8d91f889d961d72ac742b60bc133862852d9cb8d3ae94433fdebed5789e2a8131eb56cf3196

  • SSDEEP

    1572864:76+yrqzJlqMilh1ap+9It8wG5ABUmG3JS2XS03HRrLZ:75zJq6+GpGoG5S2CuRrLZ

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Nitro Labs Free.exe
    "C:\Users\Admin\AppData\Local\Temp\Nitro Labs Free.exe"
    1⤵
    • Drops startup file
    PID:2508

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2508-133-0x0000000180000000-0x000000018044D000-memory.dmp

    Filesize

    4.3MB

  • memory/2508-136-0x000002CC53670000-0x000002CC5763A000-memory.dmp

    Filesize

    63.8MB

  • memory/2508-139-0x000002CC2D710000-0x000002CC2D726000-memory.dmp

    Filesize

    88KB

  • memory/2508-142-0x000002CC2D730000-0x000002CC2D747000-memory.dmp

    Filesize

    92KB

  • memory/2508-145-0x000002CC2D700000-0x000002CC2D710000-memory.dmp

    Filesize

    64KB