Overview

overview

8

Static

static

3

NovaInstaller.exe

windows7-x64

8

NovaInstaller.exe

windows10-1703-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NovaInstaller.exe

  • Size

    152.1MB

  • Sample

    231122-rm37kada52

  • MD5

    6196a6ac54713dc0d11c7ebab96bc6d0

  • SHA1

    594c07c73f5844f74dc80b79f9d29ae0c9591f3f

  • SHA256

    74db4ae35512c9a7be17f01544b2a5bd56b3b256edb3f179e76b59951f222175

  • SHA512

    613b185438c693c25e55174eaf2dc5e8d36b57f462c82ab318276219b0bdadb1f145712b9dbb4bd49ad60dfc8e9176428c6cceaac3ff615c13e60e74153724c7

  • SSDEEP

    786432:65Nre6UmdCvF4N3RtI9n1gqBf8ICtZNXDPWsUwZnb5xFTtLwSTRpf4P1wT1vdvmu:A5UmamUyqtSyctjdegUc

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      NovaInstaller.exe

    • Size

      152.1MB

    • MD5

      6196a6ac54713dc0d11c7ebab96bc6d0

    • SHA1

      594c07c73f5844f74dc80b79f9d29ae0c9591f3f

    • SHA256

      74db4ae35512c9a7be17f01544b2a5bd56b3b256edb3f179e76b59951f222175

    • SHA512

      613b185438c693c25e55174eaf2dc5e8d36b57f462c82ab318276219b0bdadb1f145712b9dbb4bd49ad60dfc8e9176428c6cceaac3ff615c13e60e74153724c7

    • SSDEEP

      786432:65Nre6UmdCvF4N3RtI9n1gqBf8ICtZNXDPWsUwZnb5xFTtLwSTRpf4P1wT1vdvmu:A5UmamUyqtSyctjdegUc

    Score
    8/10
    discoverypersistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Blocklisted process makes network request

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks