Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
10NitroGen.exe
windows7-x64
10NitroGen.exe
windows10-2004-x64
10NitroGen.exe
android-9-x86
NitroGen.exe
android-10-x64
NitroGen.exe
android-11-x64
NitroGen.exe
macos-10.15-amd64
1NitroGen.exe
ubuntu-18.04-amd64
NitroGen.exe
debian-9-armhf
NitroGen.exe
debian-9-mips
NitroGen.exe
debian-9-mipsel
Analysis
-
max time kernel
142s -
max time network
146s -
platform
macos-10.15_amd64 -
resource
macos-20240410-en -
resource tags
arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
07/06/2024, 19:13
Behavioral task
behavioral1
Sample
NitroGen.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
NitroGen.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
NitroGen.exe
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral4
Sample
NitroGen.exe
Resource
android-x64-20240603-en
Behavioral task
behavioral5
Sample
NitroGen.exe
Resource
android-x64-arm64-20240603-en
Behavioral task
behavioral6
Sample
NitroGen.exe
Resource
macos-20240410-en
Behavioral task
behavioral7
Sample
NitroGen.exe
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral8
Sample
NitroGen.exe
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral9
Sample
NitroGen.exe
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral10
Sample
NitroGen.exe
Resource
debian9-mipsel-20240226-en
General
-
Target
NitroGen.exe
-
Size
42KB
-
MD5
f750a0d3e70a6decff53c6b7b68e8f45
-
SHA1
67214581b14115a90a4cd769312006de2960014d
-
SHA256
3597543888589ceef37913c4e4bb6b614e1007c3bc9bb08dadef7f1832e87e2e
-
SHA512
42b6a6ad81045cf80821770b0310fb4b448d4ee13be126f9b9fbc993d0ecf26afad47161319f778f17ef8986d469a5d35dc1bd51532fe969d192024c567fad4d
-
SSDEEP
768:ZpIqetQIxm8NuZMML1KTjFKZKfgm3Eh/u:LSQIvyL1KTpF7Edu
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/NitroGen.exe\""1⤵PID:484
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/NitroGen.exe\""1⤵PID:484
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/NitroGen.exe1⤵PID:484
-
/bin/zsh/bin/zsh -c /Users/run/NitroGen.exe2⤵PID:486
-
-
/Users/run/NitroGen.exe/Users/run/NitroGen.exe2⤵PID:486
-
-
/usr/bin/pluginkit/usr/bin/pluginkit -e ignore -i com.microsoft.OneDrive.FinderSync1⤵PID:489
-
/usr/sbin/spctl/usr/sbin/spctl --assess --type execute /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/OneDriveUpdater0BF23177/OneDrive.app1⤵PID:490
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:529
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:529
-
/usr/libexec/xpcproxyxpcproxy com.apple.Terminal.21001⤵PID:539
-
/System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal/System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal1⤵PID:539
-
/usr/bin/loginlogin -pf run2⤵PID:540
-
/bin/zsh-zsh3⤵PID:541
-
/usr/libexec/path_helper/usr/libexec/path_helper -s4⤵PID:542
-
-
/usr/bin/localelocale LC_CTYPE4⤵PID:543
-
-
/usr/bin/curlcurl ipapi.org4⤵PID:544
-
-
/usr/bin/curlcurl ipapi.org/json4⤵PID:545
-
-
-