General
- Target NovaTune.exe
- Size 271.3MB
- Sample260504-dkjs9abv91
- SHA256 fb36f3134ecc0972d3092600b0a1b3f9e077dbc5afe6b1dd2d466493db4664af
- MD5 14d02e07dad6f3e71a8c3e29b339fe06
- SHA1 f0502943fb55b16b824875b06cf8fda6d874b4c2
- SHA512 8fa2a32e30b3211c0654c970d508f301020740125fa435d46c045702a6244ddf3b962ea25461cfcd128ae5a5c98228c31d694b7d41751c98aa0e9aceb9e978d5
- SSDEEP 6291456:29dk2kDauUsIcxp17pgbNLH0tp17qP89oZCeGjCcH/eT8fG7M3V7XZysrLDbP:2jKbxpRpgRLH0tpR689oCB/G7gV7JyOP
- TLSH T194D833C096B01E23DE7E7176F2D3376119EC16B39B658886B74E0BED0C8527A0BD859C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
NovaTune.exe
Resource
win10ltsc2021-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target NovaTune.exe
- Size 271.3MB
- SHA256 fb36f3134ecc0972d3092600b0a1b3f9e077dbc5afe6b1dd2d466493db4664af
- MD5 14d02e07dad6f3e71a8c3e29b339fe06
- SHA1 f0502943fb55b16b824875b06cf8fda6d874b4c2
- SHA512 8fa2a32e30b3211c0654c970d508f301020740125fa435d46c045702a6244ddf3b962ea25461cfcd128ae5a5c98228c31d694b7d41751c98aa0e9aceb9e978d5
- SSDEEP 6291456:29dk2kDauUsIcxp17pgbNLH0tp17qP89oZCeGjCcH/eT8fG7M3V7XZysrLDbP:2jKbxpRpgRLH0tpR689oCB/G7gV7JyOP
- TLSH T194D833C096B01E23DE7E7176F2D3376119EC16B39B658886B74E0BED0C8527A0BD859C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates processes with tasklist