nitro[.]bin[.]zip | Triage™

Resubmissions

18/08/2023, 14:04

230818-rdb2qaac87

27/04/2021, 15:25

210427-nlva9ev87e8

27/04/2021, 14:03

210427-vj2ehadz4s8

Sharing

Copy URL Twitter E-mail

General

Target
nitro.bin.zip
Size 24KB
Sample230818-rdb2qaac87
SHA256 acbe3153184397a7e789f93226ff4d8560f8b4b3a5b57281968f67d246e35cf4
MD5 a418d452bc1b5899c330a559d8ddc2c7
SHA1 70397565d985ef4eb9cb3579a9e298eaea9a6674
SHA512 e4eed250b182020749376ad43b2f4ec850d033118587b98feda4d4ad0835ef999607fa223a31217fcfd34bff5f020b628ed6ca85e9ce9b303bfcd4cef5bcdfc3
SSDEEP 384:zjY32fAiaJKrprxJRWJhWLcx0xorOc/yzAn9axexvYpMS+twvBMU+a8Jd5iN4sY4:z0mFaJo40G/y+xAGFtwiJJLWYZeZETi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/92190c9789485a0d96bced7040080f0ae35c02898c3d31a65d50ecd659b80f09.bin

File Explorer

nitro.bin.zip

.zip 24KB
92190c9789485a0d96bced7040080f0ae35c02898c3d31a65d50ecd659b80f09.bin

.exe 61KB

nitro.bin.zip

SHA256 acbe3153184397a7e789f93226ff4d8560f8b4b3a5b57281968f67d246e35cf4
MD5 a418d452bc1b5899c330a559d8ddc2c7
SHA1 70397565d985ef4eb9cb3579a9e298eaea9a6674
SHA512 e4eed250b182020749376ad43b2f4ec850d033118587b98feda4d4ad0835ef999607fa223a31217fcfd34bff5f020b628ed6ca85e9ce9b303bfcd4cef5bcdfc3
SSDEEP 384:zjY32fAiaJKrprxJRWJhWLcx0xorOc/yzAn9axexvYpMS+twvBMU+a8Jd5iN4sY4:z0mFaJo40G/y+xAGFtwiJJLWYZeZETi
MD5 SHA1 SHA512 SSDEEP

Password

infected

92190c9789485a0d96bced7040080f0ae35c02898c3d31a65d50ecd659b80f09.bin

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 92190c9789485a0d96bced7040080f0ae35c02898c3d31a65d50ecd659b80f09
MD5 077fccc46159f8ccd79fcd50787db1c9
SHA1 288635e27276ba6da3291d0982a8f0f23ae0065e
SHA512 6028a1b66ea3e6baae6c11005596c6a6fff982d132ad23c502bf57c5d0995829f983963ba451142f2780214da6c8588e8f83b2972d289367300094fee9cebe74
SSDEEP 768:SKsMqCXfVcW42vM9ZkiANIUe2YLDwUzc80gmq3oP/oDY:SKse4qM9ZkiAPOr/0O8/o8
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

68582

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths