NitroRansomware[.]exe

Resubmissions

05/07/2023, 01:56

230705-ccwbmsab8810

05/07/2023, 01:53

230705-cbf6bsbg5w10

Sharing

Copy URL Twitter E-mail

General

Target
NitroRansomware.exe
Size 1.7MB
Sample230705-ccwbmsab88
SHA256 7dc509779753238fde335d4471b1c14f3cdb81c44a0bf8063263e668d7b551d0
MD5 e18bbc64d2e7eab468dfb1eb524e4136
SHA1 4ea066712286c05c02160bfdcbf8ad2a903e5a1b
SHA512 d5d2655146a21e94cb393acfa520f5e90757162ff850ba87e99ef598fb9135c4978859bfd843ee94923685ea3d1ad47b9393edb0adb9d4fa48884f7602026f78
SSDEEP 49152:LocYGwfZPnlXMTdngwwHv5VbtHw1kqXfd+/9AE:LoBDZdcNgNhVRw1kqXf0F
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NitroRansomware.exe

File Explorer

NitroRansomware.exe

.exe 1.7MB

NitroRansomware.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 7dc509779753238fde335d4471b1c14f3cdb81c44a0bf8063263e668d7b551d0
MD5 e18bbc64d2e7eab468dfb1eb524e4136
SHA1 4ea066712286c05c02160bfdcbf8ad2a903e5a1b
SHA512 d5d2655146a21e94cb393acfa520f5e90757162ff850ba87e99ef598fb9135c4978859bfd843ee94923685ea3d1ad47b9393edb0adb9d4fa48884f7602026f78
SSDEEP 49152:LocYGwfZPnlXMTdngwwHv5VbtHw1kqXfd+/9AE:LoBDZdcNgNhVRw1kqXf0F
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1762094

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths