Resubmissions

12/04/2023, 22:07

230412-11qm3aff52 10

12/04/2023, 04:42

230412-fbw4bsbe3w 10

Analysis

  • max time kernel
    328s
  • max time network
    335s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    12/04/2023, 04:42

General

  • Target

    Nitro Labs Free.exe

  • Size

    77.9MB

  • MD5

    367f953c72b57e764286aca5943642fc

  • SHA1

    56c0f48c15edcd18db60887e80becfeda1e40bce

  • SHA256

    c7262e7cc23257bd4bdbf84e1d9a196b07fa7715172d51164f0bb69f94aa5384

  • SHA512

    39a6045ddd45de85f3fdca1624595c1094573ddf37b2e61573cbb8d91f889d961d72ac742b60bc133862852d9cb8d3ae94433fdebed5789e2a8131eb56cf3196

  • SSDEEP

    1572864:76+yrqzJlqMilh1ap+9It8wG5ABUmG3JS2XS03HRrLZ:75zJq6+GpGoG5S2CuRrLZ

Score
10/10

Malware Config

Signatures

  • Detects any file with a triage score of 10 2 IoCs

    This file has been assigned a triage score of 10, indicating a high likelihood of malicious behavior.

  • Drops startup file 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Nitro Labs Free.exe
    "C:\Users\Admin\AppData\Local\Temp\Nitro Labs Free.exe"
    1⤵
    • Drops startup file
    PID:1360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1360-54-0x0000000180000000-0x000000018044D000-memory.dmp

    Filesize

    4.3MB

  • memory/1360-57-0x00000000270C0000-0x000000002B08A000-memory.dmp

    Filesize

    63.8MB

  • memory/1360-60-0x00000000002E0000-0x00000000002F6000-memory.dmp

    Filesize

    88KB

  • memory/1360-63-0x0000000000350000-0x0000000000367000-memory.dmp

    Filesize

    92KB

  • memory/1360-66-0x00000000002D0000-0x00000000002E0000-memory.dmp

    Filesize

    64KB