f4e646b5ff58c1c1f8de1888f1315f8953c59388060141c6f2ab07a4331b157b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NitroGen.exe
Size

6.7MB
Sample

240914-lxs7fsyejf
MD5

d0c36409ceed9b71c38828f8ce0c8d7f
SHA1

d8e7bcaa6efd38fd99b634a6fa0b4dfc567a6fa0
SHA256

f4e646b5ff58c1c1f8de1888f1315f8953c59388060141c6f2ab07a4331b157b
SHA512

4eaebde47ff5b2b7222fdf1c9eb9b62e88424a5a9dfb0c9bdc31d639a6c23c45b6954df6fcccd1c0e6f045d0e91fdc7bf8e89c588ac2d6c12828a4c552764034
SSDEEP

196608:h7LSdPYnbrG/QeBv0L3OK9zUzbPuiaTv:h3NPG/Qauv9zUPmZ

Score

7^/10

discovery pyinstaller

Malware Config

Targets

- Target
  
  NitroGen.exe
- Size
  
  6.7MB
- MD5
  
  d0c36409ceed9b71c38828f8ce0c8d7f
- SHA1
  
  d8e7bcaa6efd38fd99b634a6fa0b4dfc567a6fa0
- SHA256
  
  f4e646b5ff58c1c1f8de1888f1315f8953c59388060141c6f2ab07a4331b157b
- SHA512
  
  4eaebde47ff5b2b7222fdf1c9eb9b62e88424a5a9dfb0c9bdc31d639a6c23c45b6954df6fcccd1c0e6f045d0e91fdc7bf8e89c588ac2d6c12828a4c552764034
- SSDEEP
  
  196608:h7LSdPYnbrG/QeBv0L3OK9zUzbPuiaTv:h3NPG/Qauv9zUPmZ
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  nitro.pyc
- Size
  
  3KB
- MD5
  
  e44dd973e3f9113fe95a6eeb51dacea7
- SHA1
  
  d8148530ff1795bcec8cadf4385267c6672cc710
- SHA256
  
  7af47b2afd82782eb114c2c92f434c8b13b651d9dcbdf329e9193293e26c8ce6
- SHA512
  
  0c6a76154b1dde8e6b8e12504e1e0be30166c05ce303b684460d4697fdb1d4bba70b6786a98dcc204901e7fe1e78f4a06a00972af1ec0cbb3087f0baec4b8b3b
Score

3^/10

discovery
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4