Overview
overview
10Static
static
10NitroGenerator.rar
windows7-x64
7NitroGenerator.rar
windows10-2004-x64
8Nitro Generator.exe
windows7-x64
7Nitro Generator.exe
windows10-2004-x64
7main.pyc
windows7-x64
3main.pyc
windows10-2004-x64
3ReadMe.txt
windows7-x64
1ReadMe.txt
windows10-2004-x64
1install_python.bat
windows7-x64
1install_python.bat
windows10-2004-x64
8Analysis
-
max time kernel
138s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
20-02-2024 20:43
Behavioral task
behavioral1
Sample
NitroGenerator.rar
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
NitroGenerator.rar
Resource
win10v2004-20240220-en
Behavioral task
behavioral3
Sample
Nitro Generator.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Nitro Generator.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
main.pyc
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
main.pyc
Resource
win10v2004-20240220-en
Behavioral task
behavioral7
Sample
ReadMe.txt
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
ReadMe.txt
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
install_python.bat
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
install_python.bat
Resource
win10v2004-20231215-en
General
-
Target
ReadMe.txt
-
Size
766B
-
MD5
7a571e9af2c6b8ea02e471352bd193a8
-
SHA1
a0e24ce1dfe04353171c50db9b8e286a4269bf55
-
SHA256
a003522f736164bb4582cbb08140b2bacc3665cff1a998b63d2fd420b2317b0a
-
SHA512
6639dc4fc6eb68f4e3c5bb88e311f39be86448f764fab3ecc34d4bf777f1d7f5fae0e6de14a4229f92343a01d2d873e1749d39ae63632c5507535c99d21b274d
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 228 NOTEPAD.EXE