Overview

overview

10

Static

static

10

NitroRansomware.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NitroRansomware.exe

  • Size

    1.7MB

  • Sample

    230707-2nmw3sdb5x

  • MD5

    31ddcf7eaeef8857e2a6f3a1bbf34a09

  • SHA1

    bcfee5374172f50e431c6486d24925cf07d14e3a

  • SHA256

    c1d03cea76ebe3fad233250347dc80a0f0661991ebd119ee549d535b24769a79

  • SHA512

    9b8eae3bc41c6484920eed652057c8f04dcb362dc3de74d4a780e832540521578fafc75d786902c3b05622c2808cf8e240c9f1e894fbaf4abebd353ae87a34c6

  • SSDEEP

    49152:QRYYGwfZPnlXgNuTdngwwHv5VbtHw1kqXfd+/9A:QRNDZdQNuNgNhVRw1kqXf0F

Score
10/10
nitroransomware

Malware Config

Extracted

Family

nitro

C2

https://api.telegram.org/botPut your telegram token here/sendMessage?chat_id=Put your telegram chat ID here

Attributes
  • decrypt_key

    e14a1a875002aa43e3b7869ef81c4f675abfcfa3563a2dbd191d0c96a03a7c75/

Targets

    • Target

      NitroRansomware.exe

    • Size

      1.7MB

    • MD5

      31ddcf7eaeef8857e2a6f3a1bbf34a09

    • SHA1

      bcfee5374172f50e431c6486d24925cf07d14e3a

    • SHA256

      c1d03cea76ebe3fad233250347dc80a0f0661991ebd119ee549d535b24769a79

    • SHA512

      9b8eae3bc41c6484920eed652057c8f04dcb362dc3de74d4a780e832540521578fafc75d786902c3b05622c2808cf8e240c9f1e894fbaf4abebd353ae87a34c6

    • SSDEEP

      49152:QRYYGwfZPnlXgNuTdngwwHv5VbtHw1kqXfd+/9A:QRNDZdQNuNgNhVRw1kqXf0F

    Score
    10/10
    nitroransomware

    • Nitro

      A ransomware that demands Discord nitro gift codes to decrypt files.

      ransomwarenitro
    behavioral1

MITRE ATT&CK Matrix

Tasks