Overview

overview

10

Static

static

3

NitroRansomware.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NitroRansomware.exe

  • Size

    1.3MB

  • Sample

    230703-brmsdaec47

  • MD5

    3045686ac229ca8ea1c30217bcc4910e

  • SHA1

    0120e0dc05331a99ba6d937439b97e7ee68fcfc3

  • SHA256

    2bb0bec19264d1be7d41a921e6312b43a12dbb6e32b21eefcd388b3ad100aaa4

  • SHA512

    927f6094353d8bce48f280f4505ceb597c63245bd96459493565196a56212b7e747436cbfd92851116e42101756cb3d313e0b67e38a042b50e84842e4a66b732

  • SSDEEP

    24576:YWYGGwodngwtlaHxN8KUWVe6tw2wvKhLnekqjVnlqud+/2P+A+q:YWYGjodngwwHv5VbtHw1kqXfd+/9A

Score
10/10
nitroevasionpersistenceransomwaretrojan

Malware Config

Targets

    • Target

      NitroRansomware.exe

    • Size

      1.3MB

    • MD5

      3045686ac229ca8ea1c30217bcc4910e

    • SHA1

      0120e0dc05331a99ba6d937439b97e7ee68fcfc3

    • SHA256

      2bb0bec19264d1be7d41a921e6312b43a12dbb6e32b21eefcd388b3ad100aaa4

    • SHA512

      927f6094353d8bce48f280f4505ceb597c63245bd96459493565196a56212b7e747436cbfd92851116e42101756cb3d313e0b67e38a042b50e84842e4a66b732

    • SSDEEP

      24576:YWYGGwodngwtlaHxN8KUWVe6tw2wvKhLnekqjVnlqud+/2P+A+q:YWYGjodngwwHv5VbtHw1kqXfd+/9A

    Score
    10/10
    nitroevasionpersistenceransomwaretrojan

    • Nitro

      A ransomware that demands Discord nitro gift codes to decrypt files.

      ransomwarenitro

    • UAC bypass

      evasiontrojan

    • Disables Task Manager via registry modification

      evasion

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops desktop.ini file(s)

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks