General
- Target NoveNTweaks (1).exe
- Size 13KB
- Sample260801-ced55svfqb
- SHA256 a26a9f1d9b8c053ab89e243a23b2301dfad71ce5fcb186fd76aa22bf9479d165
- MD5 5c3a8e74f6831ecb84a33102b1406224
- SHA1 daacb0bc5aee1bbb7c91eb59f0c1c14592b2e7be
- SHA512 b5ce93bc55c6acb2c37485ac6b50dc2c8bd390533e40f724514d77a2d7a1c090e0d05b3d8eceafa59fb7f544c226d9b29819387ba5f1f0a1e744330f6f4dd1e6
- SSDEEP 384:Wx6gGrHbWxlSggaRmKUsLN2Pa1wt3z2bdCjZEO:Wx6gG2xlSZwrUsLN2Pa6zGCjx
- TLSH T18F522E6CBCC5585B5BE7015B2D59D408BCA1C52B928C1DC4F68C82A4FFE536CC2F26BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
NoveNTweaks (1).ps1
Resource
win10v2004-20260513-en
13 signatures
900 seconds
Behavioral task
behavioral2
Sample
NoveNTweaks (1).ps1
Resource
win11ltsc2024-20260709-en
15 signatures
900 seconds
Malware Config
Targets
-
- Target NoveNTweaks (1).exe
- Size 13KB
- SHA256 a26a9f1d9b8c053ab89e243a23b2301dfad71ce5fcb186fd76aa22bf9479d165
- MD5 5c3a8e74f6831ecb84a33102b1406224
- SHA1 daacb0bc5aee1bbb7c91eb59f0c1c14592b2e7be
- SHA512 b5ce93bc55c6acb2c37485ac6b50dc2c8bd390533e40f724514d77a2d7a1c090e0d05b3d8eceafa59fb7f544c226d9b29819387ba5f1f0a1e744330f6f4dd1e6
- SSDEEP 384:Wx6gGrHbWxlSggaRmKUsLN2Pa1wt3z2bdCjZEO:Wx6gG2xlSZwrUsLN2Pa6zGCjx
- TLSH T18F522E6CBCC5585B5BE7015B2D59D408BCA1C52B928C1DC4F68C82A4FFE536CC2F26BA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.