General

  • Target

    Setup Archetype Nolly v2.0.0.exe

  • Size

    190.8MB

  • Sample

    240805-xg379sydrf

  • MD5

    6b1c97232ef2e9335a800381e6e47db7

  • SHA1

    1f0f3efab2b5a40cbe1d0ce6725dbb2567f46e85

  • SHA256

    f6fadc88024a49448b52cf9a4eac7d1678515c414efab84ca9967da622019630

  • SHA512

    d7adc0bf34299e40acb805796fbaf4771799664b3accea820b292fdcd355f00c79e0d40689a2da6b4837f966faa7aa4b50a8de6399430cfdea595d045bcb9fd3

  • SSDEEP

    3145728:f+Avtw1yp5TKrQooGqtbQgNPcovPJ8nLuB0yGzi7lkySkmgWyRTnCvm0epvF4Vh/:GUJ3e8oIbvh8nLlG7CPqB/pvSf

Score
7/10

Malware Config

Targets

    • Target

      Setup Archetype Nolly v2.0.0.exe

    • Size

      190.8MB

    • MD5

      6b1c97232ef2e9335a800381e6e47db7

    • SHA1

      1f0f3efab2b5a40cbe1d0ce6725dbb2567f46e85

    • SHA256

      f6fadc88024a49448b52cf9a4eac7d1678515c414efab84ca9967da622019630

    • SHA512

      d7adc0bf34299e40acb805796fbaf4771799664b3accea820b292fdcd355f00c79e0d40689a2da6b4837f966faa7aa4b50a8de6399430cfdea595d045bcb9fd3

    • SSDEEP

      3145728:f+Avtw1yp5TKrQooGqtbQgNPcovPJ8nLuB0yGzi7lkySkmgWyRTnCvm0epvF4Vh/:GUJ3e8oIbvh8nLlG7CPqB/pvSf

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks