NitroRansomware[.]rar

General

Target
NitroRansomware.rar
Size 24KB
Sample240101-rhjmcsccbk
SHA256 9a8fb8a3604604036f0b7747d6fb17f66076ae60fcc28ce88d8ba60098a09511
MD5 e9b76fdbfa3025816e78e0fc64e50723
SHA1 0dcf92eeadc3ce8e90484405e47f3a0604ca05da
SHA512 3e0ec9832b5daa82fa19548fea36b50531b109c3c12d389ed35a905f0e3889266494e49d45ac730d65175672edf9317a957064d93e89ef7c3d3d65f7d52a0716
SSDEEP 768:aW4S0O9lgVx3hdh75X50ETHvvtuPES/ni:aW4S0EgVVNd50ONuPF/ni
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NitroRansomware.exe

File Explorer

NitroRansomware.rar

.rar 24KB
NitroRansomware.exe

.exe 61KB

NitroRansomware.rar

SHA256 9a8fb8a3604604036f0b7747d6fb17f66076ae60fcc28ce88d8ba60098a09511
MD5 e9b76fdbfa3025816e78e0fc64e50723
SHA1 0dcf92eeadc3ce8e90484405e47f3a0604ca05da
SHA512 3e0ec9832b5daa82fa19548fea36b50531b109c3c12d389ed35a905f0e3889266494e49d45ac730d65175672edf9317a957064d93e89ef7c3d3d65f7d52a0716
SSDEEP 768:aW4S0O9lgVx3hdh75X50ETHvvtuPES/ni:aW4S0EgVVNd50ONuPF/ni
MD5 SHA1 SHA512 SSDEEP

NitroRansomware.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 c5a67cae54aabf8f5e5d975135d961ed665ef021b8d20dccaebc40b1677baa3c
MD5 067cd97c3c0ae0d8b88963b23c7988c1
SHA1 d0791728110ba68941185fe756069a8b7eed5a89
SHA512 08a7f9cfc8481ed328d7f55a780cccc831809ed995342e30aef7f47652327b5c673af845d6fe5b34e7007ed1ab57f915d43e540d092590220caa5aed4116127c
SSDEEP 768:WKsMqCXfVcWlzM9ZkiANIUvDYLDwUzc80gmq3oP/oDV:WKse1M9ZkiAP0r/0O8/oJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

68562

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

NitroRansomware.rar

NitroRansomware.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

NitroRansomware.rar

NitroRansomware.exe

mscoree

dotnet