General

  • Target

    Nova V3 No Key(ADMINS ONLY) (3).zip

  • Size

    12.3MB

  • MD5

    a84578b0530dc504d4b358477a11b4fd

  • SHA1

    661b81a6c7db9ac946b6560b80d40f0ece0aeffa

  • SHA256

    dcedb8e6a63425be22fd937008e354e3d9854ca00ebcb0c77afd9af5a879ba1b

  • SHA512

    e48dfbb7f532b86e41a873e799a71e41c9f8e45aca968b321289cae3e2e64cf8fa3d35f0a01bbc9929230a55f3bb4027c8abbb09077b10b1914e2938b54ff2c8

  • SSDEEP

    393216:TPXl9l7rJ9hJrLeh2+wC8Hl6jiNljPFAOH1L6OXjcwjvXVLvpveY4Reh:TP19lpJmQ+p8HYeNTTcOzjZpvTyo

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • Nova V3 No Key(ADMINS ONLY) (3).zip
    .zip
  • Debug/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Debug/ForlornApi.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • Debug/ForlornInject.dll
    .dll windows:6 windows x64 arch:x64

    22f1907af71b391673dc37c47e7cfa75


    Headers

    Imports

    Exports

    Sections

  • Debug/Gma.System.MouseKeyHook.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Debug/Microsoft.Bcl.AsyncInterfaces.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Debug/Microsoft.Bcl.AsyncInterfaces.xml
    .xml
  • Debug/Monaco/index.html
    .html .js polyglot
  • Debug/Monaco/vs/base/worker/workerMain.js
    .js
  • Debug/Monaco/vs/basic-languages/bat/bat.js
  • Debug/Monaco/vs/basic-languages/coffee/coffee.js
  • Debug/Monaco/vs/basic-languages/cpp/cpp.js
  • Debug/Monaco/vs/basic-languages/csharp/csharp.js
  • Debug/Monaco/vs/basic-languages/csp/csp.js
  • Debug/Monaco/vs/basic-languages/css/css.js
  • Debug/Monaco/vs/basic-languages/dockerfile/dockerfile.js
  • Debug/Monaco/vs/basic-languages/fsharp/fsharp.js
  • Debug/Monaco/vs/basic-languages/go/go.js
  • Debug/Monaco/vs/basic-languages/handlebars/handlebars.js
    .js
  • Debug/Monaco/vs/basic-languages/html/html.js
    .js
  • Debug/Monaco/vs/basic-languages/ini/ini.js
  • Debug/Monaco/vs/basic-languages/java/java.js
  • Debug/Monaco/vs/basic-languages/less/less.js
  • Debug/Monaco/vs/basic-languages/lua/lua.js
  • Debug/Monaco/vs/basic-languages/markdown/markdown.js
    .js
  • Debug/Monaco/vs/basic-languages/msdax/msdax.js
  • Debug/Monaco/vs/basic-languages/mysql/mysql.js
  • Debug/Monaco/vs/basic-languages/objective-c/objective-c.js
  • Debug/Monaco/vs/basic-languages/pgsql/pgsql.js
  • Debug/Monaco/vs/basic-languages/php/php.js
  • Debug/Monaco/vs/basic-languages/postiats/postiats.js
  • Debug/Monaco/vs/basic-languages/powershell/powershell.js
  • Debug/Monaco/vs/basic-languages/pug/pug.js
  • Debug/Monaco/vs/basic-languages/python/python.js
  • Debug/Monaco/vs/basic-languages/r/r.js
  • Debug/Monaco/vs/basic-languages/razor/razor.js
    .js
  • Debug/Monaco/vs/basic-languages/redis/redis.js
  • Debug/Monaco/vs/basic-languages/redshift/redshift.js
  • Debug/Monaco/vs/basic-languages/ruby/ruby.js
  • Debug/Monaco/vs/basic-languages/rust/rust.js
  • Debug/Monaco/vs/basic-languages/sb/sb.js
  • Debug/Monaco/vs/basic-languages/scss/scss.js
  • Debug/Monaco/vs/basic-languages/solidity/solidity.js
  • Debug/Monaco/vs/basic-languages/sql/sql.js
  • Debug/Monaco/vs/basic-languages/st/st.js
  • Debug/Monaco/vs/basic-languages/swift/swift.js
  • Debug/Monaco/vs/basic-languages/vb/vb.js
  • Debug/Monaco/vs/basic-languages/xml/xml.js
  • Debug/Monaco/vs/basic-languages/yaml/yaml.js
  • Debug/Monaco/vs/editor/contrib/suggest/media/String_16x.svg
  • Debug/Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
  • Debug/Monaco/vs/editor/editor.main.css
  • Debug/Monaco/vs/editor/editor.main.js
    .js
  • Debug/Monaco/vs/editor/editor.main.nls.de.js
  • Debug/Monaco/vs/editor/editor.main.nls.es.js
  • Debug/Monaco/vs/editor/editor.main.nls.fr.js
  • Debug/Monaco/vs/editor/editor.main.nls.it.js
  • Debug/Monaco/vs/editor/editor.main.nls.ja.js
  • Debug/Monaco/vs/editor/editor.main.nls.js
  • Debug/Monaco/vs/editor/editor.main.nls.ko.js
  • Debug/Monaco/vs/editor/editor.main.nls.ru.js
  • Debug/Monaco/vs/editor/editor.main.nls.zh-cn.js
  • Debug/Monaco/vs/editor/editor.main.nls.zh-tw.js
  • Debug/Monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
  • Debug/Monaco/vs/language/css/cssMode.js
    .js
  • Debug/Monaco/vs/language/css/cssWorker.js
    .js
  • Debug/Monaco/vs/language/html/htmlMode.js
    .js
  • Debug/Monaco/vs/language/html/htmlWorker.js
    .js
  • Debug/Monaco/vs/language/json/jsonMode.js
    .js
  • Debug/Monaco/vs/language/json/jsonWorker.js
    .js
  • Debug/Monaco/vs/language/typescript/lib/typescriptServices.js
    .js
  • Debug/Monaco/vs/language/typescript/tsMode.js
    .js
  • Debug/Monaco/vs/language/typescript/tsWorker.js
    .js
  • Debug/Monaco/vs/loader.js
    .js
  • Debug/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Debug/Newtonsoft.Json.xml
    .xml
  • Debug/Nova V3.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Debug/Nova V3.exe.config
  • Debug/Nova V3.pdb
  • Debug/Scripts/Admin Script!.txt
    .js
  • Debug/System.Buffers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Debug/System.Buffers.xml
  • Debug/System.Memory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Debug/System.Memory.xml
  • Debug/System.Numerics.Vectors.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Debug/System.Numerics.Vectors.xml
  • Debug/System.Runtime.CompilerServices.Unsafe.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Debug/System.Runtime.CompilerServices.Unsafe.xml
  • Debug/System.Text.Encodings.Web.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Debug/System.Text.Encodings.Web.xml
  • Debug/System.Text.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Debug/System.Text.Json.xml
  • Debug/System.Threading.Tasks.Extensions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Debug/System.Threading.Tasks.Extensions.xml
  • Debug/System.ValueTuple.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Debug/System.ValueTuple.xml
    .xml
  • Debug/bin/ForlornInject.dll
    .dll windows:6 windows x64 arch:x64

    9c28f4c4f151a56262df5247ebe339ea


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/Version.txt
  • Debug/bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    1dedd757946c1ca3c32f97146f7a6c25


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections

  • Debug/workspace/.tests/appendfile.txt
  • Debug/workspace/.tests/getcustomasset.txt
  • Debug/workspace/.tests/isfile.txt
  • Debug/workspace/.tests/listfiles/test_1.txt
  • Debug/workspace/.tests/listfiles/test_2.txt
  • Debug/workspace/.tests/loadfile.txt
  • Debug/workspace/.tests/readfile.txt
  • Debug/workspace/.tests/writefile
  • Debug/workspace/.tests/writefile.txt
  • Debug/workspace/IY_FE.iy
  • Debug/workspace/Scripts/Admin Script!.txt
    .js