Overview

overview

10

Static

static

10

NitroRansomware.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NitroRansomware.exe

  • Size

    1.7MB

  • MD5

    31ddcf7eaeef8857e2a6f3a1bbf34a09

  • SHA1

    bcfee5374172f50e431c6486d24925cf07d14e3a

  • SHA256

    c1d03cea76ebe3fad233250347dc80a0f0661991ebd119ee549d535b24769a79

  • SHA512

    9b8eae3bc41c6484920eed652057c8f04dcb362dc3de74d4a780e832540521578fafc75d786902c3b05622c2808cf8e240c9f1e894fbaf4abebd353ae87a34c6

  • SSDEEP

    49152:QRYYGwfZPnlXgNuTdngwwHv5VbtHw1kqXfd+/9A:QRNDZdQNuNgNhVRw1kqXf0F

Score
10/10
nitro

Malware Config

Extracted

Family

nitro

C2

https://api.telegram.org/botPut your telegram token here/sendMessage?chat_id=Put your telegram chat ID here

Attributes
  • decrypt_key

    e14a1a875002aa43e3b7869ef81c4f675abfcfa3563a2dbd191d0c96a03a7c75/

Signatures

  • Nitro family
    nitro
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NitroRansomware.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections