Analysis
-
max time kernel
15s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
28-11-2024 17:04
Behavioral task
behavioral1
Sample
Nova Cheat Ai (1).exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
Nova Cheat Ai (1).exe
Resource
win10v2004-20241007-en
General
-
Target
Nova Cheat Ai (1).exe
-
Size
7.5MB
-
MD5
146f40432003937e528c3125801bc54e
-
SHA1
a0a4980b5828aa85267fb52c13d9226cb3121915
-
SHA256
67c7772ab157f70d0af2ea190030f39bcac03ec0606faaf9b142c064497e804b
-
SHA512
7c04dcbf1eb855a1105592ce8edfb840254ac3a2e4c07d2754999596d7cd5af4f94f7cdadf4658a2565bb78dcef291d04fd583a85ccce8c0cbe49781a68594b2
-
SSDEEP
196608:CfgVVEg8wfI9jUC2gYBYv3vbW2+iITx1U6n/:7VVEgjIH2gYBgDWJTnz/
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
Processes:
Nova Cheat Ai (1).exepid Process 2856 Nova Cheat Ai (1).exe -
Processes:
resource yara_rule behavioral1/files/0x000500000001950f-21.dat upx behavioral1/memory/2856-23-0x000007FEF5DB0000-0x000007FEF6475000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
Nova Cheat Ai (1).exedescription pid Process procid_target PID 2608 wrote to memory of 2856 2608 Nova Cheat Ai (1).exe 29 PID 2608 wrote to memory of 2856 2608 Nova Cheat Ai (1).exe 29 PID 2608 wrote to memory of 2856 2608 Nova Cheat Ai (1).exe 29
Processes
-
C:\Users\Admin\AppData\Local\Temp\Nova Cheat Ai (1).exe"C:\Users\Admin\AppData\Local\Temp\Nova Cheat Ai (1).exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2608 -
C:\Users\Admin\AppData\Local\Temp\Nova Cheat Ai (1).exe"C:\Users\Admin\AppData\Local\Temp\Nova Cheat Ai (1).exe"2⤵
- Loads dropped DLL
PID:2856
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB
MD56f7c42579f6c2b45fe866747127aef09
SHA1b9487372fe3ed61022e52cc8dbd37e6640e87723
SHA25607642b6a3d99ce88cff790087ac4e2ba0b2da1100cf1897f36e096427b580ee5
SHA512aadf06fd6b4e14f600b0a614001b8c31e42d71801adec7c9c177dcbb4956e27617fa45ba477260a7e06d2ca4979ed5acc60311258427ee085e8025b61452acec