Overview

overview

8

Static

static

1

NitroBoostGen24.exe

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    NitroBoostGen24.exe

  • Size

    23.5MB

  • Sample

    240629-ez17hstfll

  • MD5

    3d616d8ba8411a4b431b8bba0adc1ef3

  • SHA1

    2599930bd8518815ce081b86d72dfbc8fcf61d86

  • SHA256

    0a7aa8f6bfea8d0ba1b452e540352a132ff7be02cfd7f9f2b7eb9e01fcad7520

  • SHA512

    744e61ebaa4079d0ce5735dde1f50333f448f96a318a387a1121e21860ddc77cfac5908fb3b370dff5598329cd2317779d9571c8a6dff2943df33958a765d089

  • SSDEEP

    393216:pa92Yg5BHtSTurEUWjE+8PvIxjDTVggMHDDgSezga6yWH9SFPTw6xG:s9SVGdbE+KvIFVOj0Sezgak9SFPJ8

Score
8/10
spywarestealerupx

Malware Config

Targets

    • Target

      NitroBoostGen24.exe

    • Size

      23.5MB

    • MD5

      3d616d8ba8411a4b431b8bba0adc1ef3

    • SHA1

      2599930bd8518815ce081b86d72dfbc8fcf61d86

    • SHA256

      0a7aa8f6bfea8d0ba1b452e540352a132ff7be02cfd7f9f2b7eb9e01fcad7520

    • SHA512

      744e61ebaa4079d0ce5735dde1f50333f448f96a318a387a1121e21860ddc77cfac5908fb3b370dff5598329cd2317779d9571c8a6dff2943df33958a765d089

    • SSDEEP

      393216:pa92Yg5BHtSTurEUWjE+8PvIxjDTVggMHDDgSezga6yWH9SFPTw6xG:s9SVGdbE+KvIFVOj0Sezgak9SFPJ8

    Score
    8/10
    spywarestealerupx

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks