General

  • Target

    nitroTypeInstaller.exe

  • Size

    26.0MB

  • Sample

    240409-bgph8ach9t

  • MD5

    8e2f241262ab921eae4e4268f5a2493c

  • SHA1

    89f31f0834980147aa6016eda6a138ead57200a5

  • SHA256

    fb2c2059bb5f048480b50a2f593b8c11271dac06df42e39d323d9421d91a45d6

  • SHA512

    1f21f27e501d09567bf32c7aa4189808e5963c2887037a3e617a704afc34263654d278a8012e022c2726f99f5209dc51c1c57389c5d0ff328fedff02d787d08f

  • SSDEEP

    786432:d8aQWWKDJj75nwTSNtmRCg5ssA8yMRLlh6f2L/NU:dZWkZ5nwctmb+iWf/

Malware Config

Targets

    • Target

      nitroTypeInstaller.exe

    • Size

      26.0MB

    • MD5

      8e2f241262ab921eae4e4268f5a2493c

    • SHA1

      89f31f0834980147aa6016eda6a138ead57200a5

    • SHA256

      fb2c2059bb5f048480b50a2f593b8c11271dac06df42e39d323d9421d91a45d6

    • SHA512

      1f21f27e501d09567bf32c7aa4189808e5963c2887037a3e617a704afc34263654d278a8012e022c2726f99f5209dc51c1c57389c5d0ff328fedff02d787d08f

    • SSDEEP

      786432:d8aQWWKDJj75nwTSNtmRCg5ssA8yMRLlh6f2L/NU:dZWkZ5nwctmb+iWf/

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks