Overview

overview

7

Static

static

3

Novainstaller2.4.exe

windows7-x64

7

Novainstaller2.4.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Novainstaller2.4.exe

  • Size

    24.1MB

  • Sample

    240308-vhc2cscc93

  • MD5

    e02931368230eaa6419d81abe01d22e4

  • SHA1

    7cdc39cc5125618f80afcd25b4bfcb2b5fcafd5b

  • SHA256

    15d2ef101f2fa4df0a1c1f7140d38ce5887f44e3a170052ece91387b2b283859

  • SHA512

    6d425297de44b1433fae737d52fb33b82a6e77b42bacda0a197576019436e3a7d676ec1fa04788eaec78bee5d8a0149b0b465adf86e71208f88b5937e7882eeb

  • SSDEEP

    393216:no9Du63QDx+h2Jp5MgB+7/pWYkRVuX2ByeZW2pRR5uHTy:o97QN+hSB+7/pWFuXulZ4z

Score
7/10
pyinstallerupx

Malware Config

Targets

    • Target

      Novainstaller2.4.exe

    • Size

      24.1MB

    • MD5

      e02931368230eaa6419d81abe01d22e4

    • SHA1

      7cdc39cc5125618f80afcd25b4bfcb2b5fcafd5b

    • SHA256

      15d2ef101f2fa4df0a1c1f7140d38ce5887f44e3a170052ece91387b2b283859

    • SHA512

      6d425297de44b1433fae737d52fb33b82a6e77b42bacda0a197576019436e3a7d676ec1fa04788eaec78bee5d8a0149b0b465adf86e71208f88b5937e7882eeb

    • SSDEEP

      393216:no9Du63QDx+h2Jp5MgB+7/pWYkRVuX2ByeZW2pRR5uHTy:o97QN+hSB+7/pWFuXulZ4z

    Score
    7/10
    upx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks