Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
30s -
max time network
33s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
26/05/2023, 23:49
Behavioral task
behavioral1
Sample
Discord_Nitro_Generator.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Discord_Nitro_Generator.exe
Resource
win10v2004-20230220-en
General
-
Target
Discord_Nitro_Generator.exe
-
Size
10.3MB
-
MD5
deb8e6b240f3fe4f14717f270bc7d72b
-
SHA1
454d0cc939a7c45fcd38f2a10a6fe025d8c2a1ba
-
SHA256
f16a87e183bfe34afc75098a027d9397bf97a8fd2d289abe723d628072602b3c
-
SHA512
cd3da01d3305e722cec703e4e7a5581ca1e73a6f8a6133ed0fb8e4a2a8c619dd719ce390f8fce142b1a06171f9576d679c80b19b099e306d2ea2a69a9aee6b83
-
SSDEEP
196608:SDf+GIzme9onJ5hrZERlyiU8AdZYJERS48RmU/3ZlsPvarTsZg8CNhHSzCqblZou:JPzJ9c5hlERJAdZYygtN3ZWarQcHSl6
Malware Config
Signatures
-
Loads dropped DLL 10 IoCs
pid Process 780 Discord_Nitro_Generator.exe 780 Discord_Nitro_Generator.exe 780 Discord_Nitro_Generator.exe 780 Discord_Nitro_Generator.exe 780 Discord_Nitro_Generator.exe 780 Discord_Nitro_Generator.exe 780 Discord_Nitro_Generator.exe 780 Discord_Nitro_Generator.exe 780 Discord_Nitro_Generator.exe 780 Discord_Nitro_Generator.exe -
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 780 Discord_Nitro_Generator.exe -
Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 3668 wrote to memory of 780 3668 Discord_Nitro_Generator.exe 86 PID 3668 wrote to memory of 780 3668 Discord_Nitro_Generator.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\Discord_Nitro_Generator.exe"C:\Users\Admin\AppData\Local\Temp\Discord_Nitro_Generator.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:3668 -
C:\Users\Admin\AppData\Local\Temp\Discord_Nitro_Generator.exe"C:\Users\Admin\AppData\Local\Temp\Discord_Nitro_Generator.exe"2⤵
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:780
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
99KB
MD58697c106593e93c11adc34faa483c4a0
SHA1cd080c51a97aa288ce6394d6c029c06ccb783790
SHA256ff43e813785ee948a937b642b03050bb4b1c6a5e23049646b891a66f65d4c833
SHA512724bbed7ce6f7506e5d0b43399fb3861dda6457a2ad2fafe734f8921c9a4393b480cdd8a435dbdbd188b90236cb98583d5d005e24fa80b5a0622a6322e6f3987
-
Filesize
99KB
MD58697c106593e93c11adc34faa483c4a0
SHA1cd080c51a97aa288ce6394d6c029c06ccb783790
SHA256ff43e813785ee948a937b642b03050bb4b1c6a5e23049646b891a66f65d4c833
SHA512724bbed7ce6f7506e5d0b43399fb3861dda6457a2ad2fafe734f8921c9a4393b480cdd8a435dbdbd188b90236cb98583d5d005e24fa80b5a0622a6322e6f3987
-
Filesize
122KB
MD529da9b022c16da461392795951ce32d9
SHA10e514a8f88395b50e797d481cbbed2b4ae490c19
SHA2563b4012343ef7a266db0b077bbb239833779192840d1e2c43dfcbc48ffd4c5372
SHA5125c7d83823f1922734625cf69a481928a5c47b6a3bceb7f24c9197175665b2e06bd1cfd745c55d1c5fe1572f2d8da2a1dcc1c1f5de0903477bb927aca22ecb26a
-
Filesize
122KB
MD529da9b022c16da461392795951ce32d9
SHA10e514a8f88395b50e797d481cbbed2b4ae490c19
SHA2563b4012343ef7a266db0b077bbb239833779192840d1e2c43dfcbc48ffd4c5372
SHA5125c7d83823f1922734625cf69a481928a5c47b6a3bceb7f24c9197175665b2e06bd1cfd745c55d1c5fe1572f2d8da2a1dcc1c1f5de0903477bb927aca22ecb26a
-
Filesize
1.1MB
MD54efa0c322322df15b64d62cc09871604
SHA185e15d3b2f10261ae62a5843d8cae2fbc35dc2a4
SHA256ea37ae4bc39476539a3e9a2ed32a453616911628f745b1fb5012d74fff0759a3
SHA512d3f616255ef9e4175196f83b7582d22dad7ae602b6da1a4b5db9b5eb7aaff0e8e859b4189f7a0d742d7208b080a565ca0022c1d6c6b9b523fffe134c032025c6
-
Filesize
1.1MB
MD54efa0c322322df15b64d62cc09871604
SHA185e15d3b2f10261ae62a5843d8cae2fbc35dc2a4
SHA256ea37ae4bc39476539a3e9a2ed32a453616911628f745b1fb5012d74fff0759a3
SHA512d3f616255ef9e4175196f83b7582d22dad7ae602b6da1a4b5db9b5eb7aaff0e8e859b4189f7a0d742d7208b080a565ca0022c1d6c6b9b523fffe134c032025c6
-
Filesize
77KB
MD5f5dd9c5922a362321978c197d3713046
SHA14fbc2d3e15f8bb21ecc1bf492f451475204426cd
SHA2564494992665305fc9401ed327398ee40064fe26342fe44df11d89d2ac1cc6f626
SHA512ce818113bb87c6e38fa85156548c6f207aaab01db311a6d8c63c6d900d607d7beff73e64d717f08388ece4b88bf8b95b71911109082cf4b0c0a9b0663b9a8e99
-
Filesize
77KB
MD5f5dd9c5922a362321978c197d3713046
SHA14fbc2d3e15f8bb21ecc1bf492f451475204426cd
SHA2564494992665305fc9401ed327398ee40064fe26342fe44df11d89d2ac1cc6f626
SHA512ce818113bb87c6e38fa85156548c6f207aaab01db311a6d8c63c6d900d607d7beff73e64d717f08388ece4b88bf8b95b71911109082cf4b0c0a9b0663b9a8e99
-
Filesize
149KB
MD5ef4755195cc9b2ff134ea61acde20637
SHA1d5ba42c97488da1910cf3f83a52f7971385642c2
SHA2568a86957b3496c8b679fcf22c287006108bfe0bb0aaffea17121c761a0744b470
SHA51263ad2601fb629e74cf60d980cec292b6e8349615996651b7c7f68991cdae5f89b28c11adb77720d7dbbd7700e55fdd5330a84b4a146386cf0c0418a8d61a8a71
-
Filesize
149KB
MD5ef4755195cc9b2ff134ea61acde20637
SHA1d5ba42c97488da1910cf3f83a52f7971385642c2
SHA2568a86957b3496c8b679fcf22c287006108bfe0bb0aaffea17121c761a0744b470
SHA51263ad2601fb629e74cf60d980cec292b6e8349615996651b7c7f68991cdae5f89b28c11adb77720d7dbbd7700e55fdd5330a84b4a146386cf0c0418a8d61a8a71
-
Filesize
767KB
MD5566017486a592241edeba9983f84ff82
SHA1fb8008d48d6be46272f11488a0282a861d55a834
SHA2568df089ca192809420b2425e27dabb50a5d7789ac4a7d62469715004fa692ed0a
SHA5121358a59c714aa242be66eec7fa03ee55e36b1631f6abd2060424e2e5333b4db4d208a25413bad0210b5ffa88c3e01cbc6d3f99642bcd7fc2aa36e600986104fe
-
Filesize
1KB
MD59d75af9a23adce751bb9a632ef96850f
SHA1e3b6b477616d122909e2f82c123be099d48a20ed
SHA256ba5c9a4c0311f9768153150df44fcbda10f13b0706e018840b104f305625f06c
SHA512b99122b01dc144ddb0deb2cfe356be58f95cf2d6edd45e3b80fd54bccd922aa72303717517bde6e948bee4178ab34bcb8f0f612ba88812b0fda531f91a8ae64c
-
Filesize
3.2MB
MD5cc4cbf715966cdcad95a1e6c95592b3d
SHA1d5873fea9c084bcc753d1c93b2d0716257bea7c3
SHA256594303e2ce6a4a02439054c84592791bf4ab0b7c12e9bbdb4b040e27251521f1
SHA5123b5af9fbbc915d172648c2b0b513b5d2151f940ccf54c23148cd303e6660395f180981b148202bef76f5209acc53b8953b1cb067546f90389a6aa300c1fbe477
-
Filesize
3.2MB
MD5cc4cbf715966cdcad95a1e6c95592b3d
SHA1d5873fea9c084bcc753d1c93b2d0716257bea7c3
SHA256594303e2ce6a4a02439054c84592791bf4ab0b7c12e9bbdb4b040e27251521f1
SHA5123b5af9fbbc915d172648c2b0b513b5d2151f940ccf54c23148cd303e6660395f180981b148202bef76f5209acc53b8953b1cb067546f90389a6aa300c1fbe477
-
Filesize
32KB
MD5eef7981412be8ea459064d3090f4b3aa
SHA1c60da4830ce27afc234b3c3014c583f7f0a5a925
SHA256f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
SHA512dc9ff4202f74a13ca9949a123dff4c0223da969f49e9348feaf93da4470f7be82cfa1d392566eaaa836d77dde7193fed15a8395509f72a0e9f97c66c0a096016
-
Filesize
32KB
MD5eef7981412be8ea459064d3090f4b3aa
SHA1c60da4830ce27afc234b3c3014c583f7f0a5a925
SHA256f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
SHA512dc9ff4202f74a13ca9949a123dff4c0223da969f49e9348feaf93da4470f7be82cfa1d392566eaaa836d77dde7193fed15a8395509f72a0e9f97c66c0a096016
-
Filesize
673KB
MD5bc778f33480148efa5d62b2ec85aaa7d
SHA1b1ec87cbd8bc4398c6ebb26549961c8aab53d855
SHA2569d4cf1c03629f92662fc8d7e3f1094a7fc93cb41634994464b853df8036af843
SHA51280c1dd9d0179e6cc5f33eb62d05576a350af78b5170bfdf2ecda16f1d8c3c2d0e991a5534a113361ae62079fb165fff2344efd1b43031f1a7bfda696552ee173
-
Filesize
673KB
MD5bc778f33480148efa5d62b2ec85aaa7d
SHA1b1ec87cbd8bc4398c6ebb26549961c8aab53d855
SHA2569d4cf1c03629f92662fc8d7e3f1094a7fc93cb41634994464b853df8036af843
SHA51280c1dd9d0179e6cc5f33eb62d05576a350af78b5170bfdf2ecda16f1d8c3c2d0e991a5534a113361ae62079fb165fff2344efd1b43031f1a7bfda696552ee173
-
Filesize
4.3MB
MD511c051f93c922d6b6b4829772f27a5be
SHA142fbdf3403a4bc3d46d348ca37a9f835e073d440
SHA2560eabf135bb9492e561bbbc5602a933623c9e461aceaf6eb1ceced635e363cd5c
SHA5121cdec23486cffcb91098a8b2c3f1262d6703946acf52aa2fe701964fb228d1411d9b6683bd54527860e10affc0e3d3de92a6ecf2c6c8465e9c8b9a7304e2a4a6
-
Filesize
4.3MB
MD511c051f93c922d6b6b4829772f27a5be
SHA142fbdf3403a4bc3d46d348ca37a9f835e073d440
SHA2560eabf135bb9492e561bbbc5602a933623c9e461aceaf6eb1ceced635e363cd5c
SHA5121cdec23486cffcb91098a8b2c3f1262d6703946acf52aa2fe701964fb228d1411d9b6683bd54527860e10affc0e3d3de92a6ecf2c6c8465e9c8b9a7304e2a4a6
-
Filesize
26KB
MD57a442bbcc4b7aa02c762321f39487ba9
SHA10fcb5bbdd0c3d3c5943e557cc2a5b43e20655b83
SHA2561dd7bba480e65802657c31e6d20b1346d11bca2192575b45eb9760a4feb468ad
SHA5123433c46c7603ae0a73aa9a863b2aecd810f8c0cc6c2cd96c71ef6bde64c275e0fceb4ea138e46a5c9bf72f66dcdea3e9551cf2103188a1e98a92d8140879b34c
-
Filesize
26KB
MD57a442bbcc4b7aa02c762321f39487ba9
SHA10fcb5bbdd0c3d3c5943e557cc2a5b43e20655b83
SHA2561dd7bba480e65802657c31e6d20b1346d11bca2192575b45eb9760a4feb468ad
SHA5123433c46c7603ae0a73aa9a863b2aecd810f8c0cc6c2cd96c71ef6bde64c275e0fceb4ea138e46a5c9bf72f66dcdea3e9551cf2103188a1e98a92d8140879b34c