General

  • Target

    Nitrogen v2.4.exe

  • Size

    485KB

  • Sample

    240726-fvk56s1fnc

  • MD5

    d285629888073175f40816b1d3a4f949

  • SHA1

    caf0a4f5510b6538e574b609544bf0a77c6491ef

  • SHA256

    052271a8ed067bc084a482a1110eff1202e337e0067d518ef2ba4f8b6e466a92

  • SHA512

    9caa711254ef23c6fc4004c7d2f2e31b6bb477da45eb0d6148e19643fa8742dff70566f05b2d1e3a8548f0f76131f24f271f4bb2edd7f814c5bc2a9d126fc87e

  • SSDEEP

    6144:UsLqdufVUNDaeya1JpPRfoSeGJk7o+x5QOcgg/ns6N/onjnivGLmjUc53zYXwDzT:PFUNDaK1DPRfoZf/RVhhAGLmp3NDSK

Malware Config

Targets

    • Target

      Nitrogen v2.4.exe

    • Size

      485KB

    • MD5

      d285629888073175f40816b1d3a4f949

    • SHA1

      caf0a4f5510b6538e574b609544bf0a77c6491ef

    • SHA256

      052271a8ed067bc084a482a1110eff1202e337e0067d518ef2ba4f8b6e466a92

    • SHA512

      9caa711254ef23c6fc4004c7d2f2e31b6bb477da45eb0d6148e19643fa8742dff70566f05b2d1e3a8548f0f76131f24f271f4bb2edd7f814c5bc2a9d126fc87e

    • SSDEEP

      6144:UsLqdufVUNDaeya1JpPRfoSeGJk7o+x5QOcgg/ns6N/onjnivGLmjUc53zYXwDzT:PFUNDaK1DPRfoZf/RVhhAGLmp3NDSK

    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks