Overview

overview

10

Static

static

10

NovaGrabbe...er.exe

windows11-21h2-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NovaGrabberInstaller.exe

  • Size

    7.6MB

  • Sample

    241022-mwhj1a1cpb

  • MD5

    2c82680ae8c728f64e7d6d0179f41f1b

  • SHA1

    63d18c96a0a52446847c1da3f01c94b4eb5cf1ac

  • SHA256

    e3f2286bf0cde304df443835dcc8d3f2c8b4a395334da3dec5c1aa7d33ad024d

  • SHA512

    7d2ae6a111f2f8f38a1f3bd61ab67d858e2c0ea194dcf33ef72af72fb21a1a092a731b729d650406223a68ab0d0ee896840073ce01ab8f1a704828b66b3ba402

  • SSDEEP

    196608:/XHYkwfI9jUCzi4H1qSiXLGVi7DMgpZ3Q0VMwICEc/j6:2IHziK1piXLGVE4Ue0VJ+

Score
10/10
blankgrabberexecutionupx

Malware Config

Targets

    • Target

      NovaGrabberInstaller.exe

    • Size

      7.6MB

    • MD5

      2c82680ae8c728f64e7d6d0179f41f1b

    • SHA1

      63d18c96a0a52446847c1da3f01c94b4eb5cf1ac

    • SHA256

      e3f2286bf0cde304df443835dcc8d3f2c8b4a395334da3dec5c1aa7d33ad024d

    • SHA512

      7d2ae6a111f2f8f38a1f3bd61ab67d858e2c0ea194dcf33ef72af72fb21a1a092a731b729d650406223a68ab0d0ee896840073ce01ab8f1a704828b66b3ba402

    • SSDEEP

      196608:/XHYkwfI9jUCzi4H1qSiXLGVi7DMgpZ3Q0VMwICEc/j6:2IHziK1piXLGVE4Ue0VJ+

    Score
    8/10
    executionupx

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks