Overview

overview

8

Static

static

3

NovaInstaller.exe

windows7-x64

8

NovaInstaller.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    NovaInstaller.exe

  • Size

    152.4MB

  • Sample

    230804-nepgnabg5v

  • MD5

    4a25ea91d11185be27f72b4380dd0a5d

  • SHA1

    49eafc60aeb3e3d3b37a91ec39541bb162b59505

  • SHA256

    4fad5b68f41b28a839260670f26eaae49e2c0ad60e53212b38f8ac60ee277a9b

  • SHA512

    892808b428ed115ea12d83829c9f6ffb9081df0269a41f8eca9e83dfc86be883cef7860f95b3c30a7b9701ac06ad2ef3d429b82dd8f5c919d6480c3b39268dd4

  • SSDEEP

    786432:ZppO24RRx7jChNQNt/ZYLy/pGyjOy5l7y953zQ3TtLwSTRpf4P1wT1XKTTmBEA/3:Zu2ExfWNQNt/ZL3+jRuBT

Score
8/10
persistence

Malware Config

Targets

    • Target

      NovaInstaller.exe

    • Size

      152.4MB

    • MD5

      4a25ea91d11185be27f72b4380dd0a5d

    • SHA1

      49eafc60aeb3e3d3b37a91ec39541bb162b59505

    • SHA256

      4fad5b68f41b28a839260670f26eaae49e2c0ad60e53212b38f8ac60ee277a9b

    • SHA512

      892808b428ed115ea12d83829c9f6ffb9081df0269a41f8eca9e83dfc86be883cef7860f95b3c30a7b9701ac06ad2ef3d429b82dd8f5c919d6480c3b39268dd4

    • SSDEEP

      786432:ZppO24RRx7jChNQNt/ZYLy/pGyjOy5l7y953zQ3TtLwSTRpf4P1wT1XKTTmBEA/3:Zu2ExfWNQNt/ZL3+jRuBT

    Score
    8/10
    persistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks