Analysis
- max time kernel
149s - max time network
95s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
21/07/2026, 11:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ldr.novgk.exe
Resource
win10ltsc2021-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ldr.novgk.exe
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target ldr.novgk.exe
- Size 14.1MB
- Sample260721-nvemdset8n
- SHA256 041e5be949145302f6fc8ef5301c61c29d64100f5d88f9df7daab377917e0e05
- MD5 0d26fe1b88ae87f6154d23788966515e
- SHA1 96d8003ba1529723e92686324568b63b1fa66eb3
- SHA512 baa22831bbdb584fd5cc2acdbeba7196de0f25bfaf1452c101334f201e93c3c3093981e0e2e6d9fa2acb003ce0bb55e0eda722edfbc067254eeaf810c415d264
- SSDEEP 393216:+VZFjoc2hOawNRjXHupE4c7+EkjsQxQYVvf3:+VTjopDwjr6Q+pjsQGAn
- TLSH T1C8E6129925D0D27DC8418238F58516F9F0D57C884DFE981AFFC798217A30C9AC8B6BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Signatures
- Family: Brute Ratel C4
A customized command and control framework for red teaming and adversary simulation.
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 5032 ldr.novgk.exe 5032 ldr.novgk.exe