Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
10NovalUPDAT...nt.exe
windows7-x64
3NovalUPDAT...nt.exe
windows10-2004-x64
3NovalUPDAT...PD.exe
windows7-x64
10NovalUPDAT...PD.exe
windows10-2004-x64
10NovalUPDAT...er.dll
windows10-2004-x64
1NovalUPDAT...re.dll
windows10-2004-x64
1NovalUPDAT...cp.dll
windows10-2004-x64
1NovalUPDAT...pl.dll
windows7-x64
1NovalUPDAT...pl.dll
windows10-2004-x64
1NovalUPDAT...xt.dll
windows10-2004-x64
1NovalUPDAT...ec.dll
windows10-2004-x64
1NovalUPDAT...ef.dll
windows10-2004-x64
1NovalUPDAT...ec.dll
windows10-2004-x64
1NovalUPDAT...ta.dll
windows10-2004-x64
1NovalUPDAT...hc.dll
windows10-2004-x64
1Analysis
-
max time kernel
141s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system -
submitted
01/03/2025, 22:31
Behavioral task
behavioral1
Sample
NovalUPDATED/Noval/NovalClient.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
NovalUPDATED/Noval/NovalClient.exe
Resource
win10v2004-20250217-en
Behavioral task
behavioral3
Sample
NovalUPDATED/Noval/NovalUPD.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
NovalUPDATED/Noval/NovalUPD.exe
Resource
win10v2004-20250217-en
Behavioral task
behavioral5
Sample
NovalUPDATED/Noval/bin/WlanRadioManager.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral6
Sample
NovalUPDATED/Noval/bin/d3d10core.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral7
Sample
NovalUPDATED/Noval/bin/l2nacp.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral8
Sample
NovalUPDATED/Noval/bin/libvpl.dll
Resource
win7-20241023-en
Behavioral task
behavioral9
Sample
NovalUPDATED/Noval/bin/libvpl.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral10
Sample
NovalUPDATED/Noval/bin/msauserext.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral11
Sample
NovalUPDATED/Noval/bin/pstorec.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral12
Sample
NovalUPDATED/Noval/bin/wlanpref.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral13
Sample
NovalUPDATED/Noval/bin/wlansec.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral14
Sample
NovalUPDATED/Noval/msdelta.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral15
Sample
NovalUPDATED/Noval/nlahc.dll
Resource
win10v2004-20250217-en
General
-
Target
NovalUPDATED/Noval/bin/wlanpref.dll
-
Size
758KB
-
MD5
c9c519baeea9bc3679576f55621b9828
-
SHA1
dc7a06f7ea6a262a52f38162de95e7d1c091fdb6
-
SHA256
2d219e5d709d27462b807e0455a2ecfb77d61e694d43dbad82eb81eddcbd881a
-
SHA512
0f1d60de2ab21a0b391a23b9c353e5e28be097b0235f68ff3e909c806c6404c7111e4e130790264eef977f37da6d9754dba1f104158811084679c069cbfe81d3
-
SSDEEP
12288:yL9GSda7ZUoV+dQxIRsI47/4CD/Qtn47/4C9mCHDd:3SARsSxIoIOf
Malware Config
Signatures
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WlanPref.WlanPrefLUA.1\CurVer regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WlanPref.WlanPrefLUA.1 regsvr32.exe