NitroRansomware[.]exe

Resubmissions

02/07/2023, 00:40

230702-a1l2rsab3510

02/07/2023, 00:38

230702-azgqnaab3210

Sharing

Copy URL Twitter E-mail

General

Target
NitroRansomware.exe
Size 1.3MB
Sample230702-a1l2rsab35
SHA256 2c120f921e46cdb14f70e8723338ff34465495bfa3955e3df6972d606b4ed202
MD5 4d306858073b2a678c7562a3e845a63a
SHA1 4c6364886770069508bfdd236f54f246cdf61188
SHA512 92c85a20ec85010c04c35cc45eca023307968d5b6280391060564113b5e02b7f5e14a751f01b5c31d19d5298f87e24939570dd56b6898520c19de5703795c091
SSDEEP 24576:66YGGjodngwtlaHxN8KUWVe6tw2wvKhLnekqjVnlqud+/2P+Ap4:66YG2odngwwHv5VbtHw1kqXfd+/9A
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NitroRansomware.exe

File Explorer

NitroRansomware.exe

.exe 1.3MB

NitroRansomware.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 2c120f921e46cdb14f70e8723338ff34465495bfa3955e3df6972d606b4ed202
MD5 4d306858073b2a678c7562a3e845a63a
SHA1 4c6364886770069508bfdd236f54f246cdf61188
SHA512 92c85a20ec85010c04c35cc45eca023307968d5b6280391060564113b5e02b7f5e14a751f01b5c31d19d5298f87e24939570dd56b6898520c19de5703795c091
SSDEEP 24576:66YGGjodngwtlaHxN8KUWVe6tw2wvKhLnekqjVnlqud+/2P+Ap4:66YG2odngwwHv5VbtHw1kqXfd+/9A
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1341614

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths