General
- Target NovaTemp.exe
- Size 12.5MB
- Sample260816-znlynsxtcs
- SHA256 e99db31d50a0ca7260986cc6a0084c233cbbda3bdd07af65539fbf624d1ff7ad
- MD5 2846f9250389f8d360855918325a9ed0
- SHA1 e14b62bc803f31e9ef31786147825eba14ac29c7
- SHA512 82c96d3d6a2f9987f2edc84c72f60144f8857c319f6d67f40600c02839699653e84e8c018f2139bfb1686866234645372450c6e23c64813714723e320e1e1674
- SSDEEP 393216:LIUMW85GO9eL2Vmd6mKnBk9E3+d9U9+vHKol:LnMW85DeyVmdUBzOd9r/nl
- TLSH T1EAD62258DAE2C4ADF5AA003DF482A4296FC95C3A4AE0BD8E425DC506312339775FF25F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Novatemp.pyc
Resource
win10v2004-20260513-en
4 signatures
900 seconds
Behavioral task
behavioral2
Sample
Novatemp.pyc
Resource
win11ltsc2024-20260709-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target Novatemp.pyc
- Size 17KB
- SHA256 ccd23f670ce6a960b30a1c1618e1630726a6aadcdde6f34e5d2ff7acd4c51591
- MD5 cfbba963ae5ece002623e3d4de751748
- SHA1 113c25228ae0a8a89b1d66d697be470cf2eb5ea1
- SHA512 a020b0c9c8dc98978fa2245d655475541c786d734be7fa1166463f07dad896b05b11f2395b9da1d5fbe44cb712b7a4dac1f9f5d45dd9de6b0d9a37aa50f4c3d9
- SSDEEP 192:Vtz7ue6fgLmW1m204maQcsBbg7X7i8F3dJKy3kryd1a4nvVxfCz9v82BbVNCEEgP:DuLfBW1+aQzS7X7DF3db9l2bNAgGns
- TLSH T1AB82C98A74378856FE95F3B8845E03B8A41F636243D9A08F712271BE3C9A7C95D3895C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.