General

  • Target

    NitroGiftcodeGenerator.exe

  • Size

    8.2MB

  • Sample

    240603-ly1mxsca23

  • MD5

    6a399715839b831bbd87cb241d265362

  • SHA1

    ac4e4bae4b93345c7b949f141309e12462153c41

  • SHA256

    0bfc560359c932416b42305b5eba6ed37e3262913c0c5b358ad6e6fc180888bb

  • SHA512

    d8933ee453ea821f1f90b71dba1f6f3ae304c22c00b94e77270ad4780cc9a42b3be47e5e683df9fa15c6ff9f4ee2e192763d57ef8322ab4679fc712e53068001

  • SSDEEP

    196608:Wrbrjyq9urErvI9pWjgaAnajMsbSEo23fQC//OoLxh+:wyqurEUWjJjIfoo4jLxh+

Malware Config

Targets

    • Target

      NitroGiftcodeGenerator.exe

    • Size

      8.2MB

    • MD5

      6a399715839b831bbd87cb241d265362

    • SHA1

      ac4e4bae4b93345c7b949f141309e12462153c41

    • SHA256

      0bfc560359c932416b42305b5eba6ed37e3262913c0c5b358ad6e6fc180888bb

    • SHA512

      d8933ee453ea821f1f90b71dba1f6f3ae304c22c00b94e77270ad4780cc9a42b3be47e5e683df9fa15c6ff9f4ee2e192763d57ef8322ab4679fc712e53068001

    • SSDEEP

      196608:Wrbrjyq9urErvI9pWjgaAnajMsbSEo23fQC//OoLxh+:wyqurEUWjJjIfoo4jLxh+

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks