Overview

overview

6

Static

static

3

NitroRansomware.exe

windows10-1703-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NitroRansomware.exe

  • Size

    1.5MB

  • Sample

    230704-flj7hsbb47

  • MD5

    28f53c05fd1bcba5c6dfe308bf18b61f

  • SHA1

    044bad9f304c1d470ffcf9554c49c4d29e4df38f

  • SHA256

    badcb08d3d45a7eb38f2903b66552cea99de77e71d46157d57836d27cd122a94

  • SHA512

    7fe15578bb757839bd4f04c189972b828d3f1df53cd8449f71ec4f98c572d2c844516111f8f2ef7238c599bc4ecb7388942798f77a41d4e659f0dfe3c4b7344e

  • SSDEEP

    49152:IyYGwfZPzodngwwHv5VbtHw1kqXfd+/9AJ:IjDZbIgNhVRw1kqXf0F

Score
6/10

Malware Config

Targets

    • Target

      NitroRansomware.exe

    • Size

      1.5MB

    • MD5

      28f53c05fd1bcba5c6dfe308bf18b61f

    • SHA1

      044bad9f304c1d470ffcf9554c49c4d29e4df38f

    • SHA256

      badcb08d3d45a7eb38f2903b66552cea99de77e71d46157d57836d27cd122a94

    • SHA512

      7fe15578bb757839bd4f04c189972b828d3f1df53cd8449f71ec4f98c572d2c844516111f8f2ef7238c599bc4ecb7388942798f77a41d4e659f0dfe3c4b7344e

    • SSDEEP

      49152:IyYGwfZPzodngwwHv5VbtHw1kqXfd+/9AJ:IjDZbIgNhVRw1kqXf0F

    Score
    6/10

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks