PNNL

Abstract

In this report, we will delve into the inner workings of Nitrogen 2.0, a sophisticated malware family observed last year at PNNL. I’ll provide a high-level overview of each phase in the infection chain, illustrating how Nitrogen 2.0 infiltrates systems, drops files, and executes its malicious objectives. Additionally, we’ll compare Nitrogen 2.0 to its predecessor, Nitrogen 1.0, to examine advancements in infection chain dynamics, payload delivery, and post-exploitation techniques.