2695438fe00f2012d0af10ec8ee850b6d59091e061d0d096f14e6bced31aa9f7 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

NovaTools_8C18+.rar

windows10-2004-x64

7

NovaTools_8C18+.rar

windows11-ltsc_2024-x64

1

Common.dll

windows10-2004-x64

1

Common.dll

windows11-ltsc_2024-x64

1

Installer.exe

windows10-2004-x64

3

Installer.exe

windows11-ltsc_2024-x64

3

Uninstaller.exe

windows10-2004-x64

3

Uninstaller.exe

windows11-ltsc_2024-x64

3

dinput8.dll

windows10-2004-x64

3

dinput8.dll

windows11-ltsc_2024-x64

3

input.vbs

windows10-2004-x64

5

input.vbs

windows11-ltsc_2024-x64

5

Sharing

Copy URL Twitter E-mail

General

Target
NovaTools_8C18+.rar
Size 724KB
Sample260820-rysj7sdr2v
SHA256 2695438fe00f2012d0af10ec8ee850b6d59091e061d0d096f14e6bced31aa9f7
MD5 089e4ca02f0e4ea53554bbc41bf41e28
SHA1 2d77d5b06363310b632b96962492ca9e096cdc3e
SHA512 2e3f22880905cdf6d85664c1d6b5d4d356bc2bb769303ff517d2146443536576d60a1aab78019a181fbf87b70b73180276a801e8a0481f61bc9402b2ef6aff6b
SSDEEP 12288:vblcd1IcgYWB9pXuW/QDwnV8sjoqkHLL7QSyPAZl1/5pjKa/j9:RcdjgYWbpoKl+tUKvKE
TLSH
T1F9F423397AD6220AA4082CF8E88FDBB2E0B05E4499DD33DCF1CA7E4B40859559CDD7D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

NovaTools_8C18+.rar

Resource

win10v2004-20260513-en

windows10-2004-x64

10 signatures

150 seconds

discovery execution

Behavioral task

behavioral2

Sample

NovaTools_8C18+.rar

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

Common.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Common.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Installer.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral6

Sample

Installer.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

defense_evasion discovery

Behavioral task

behavioral7

Sample

Uninstaller.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral8

Sample

Uninstaller.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

defense_evasion discovery

Behavioral task

behavioral9

Sample

dinput8.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

dinput8.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

input.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

input.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  NovaTools_8C18+.rar
- Size 724KB
- SHA256 2695438fe00f2012d0af10ec8ee850b6d59091e061d0d096f14e6bced31aa9f7
- MD5 089e4ca02f0e4ea53554bbc41bf41e28
- SHA1 2d77d5b06363310b632b96962492ca9e096cdc3e
- SHA512 2e3f22880905cdf6d85664c1d6b5d4d356bc2bb769303ff517d2146443536576d60a1aab78019a181fbf87b70b73180276a801e8a0481f61bc9402b2ef6aff6b
- SSDEEP 12288:vblcd1IcgYWB9pXuW/QDwnV8sjoqkHLL7QSyPAZl1/5pjKa/j9:RcdjgYWbpoKl+tUKvKE
- TLSH
  T1F9F423397AD6220AA4082CF8E88FDBB2E0B05E4499DD33DCF1CA7E4B40859559CDD7D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Executes dropped EXE
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1 behavioral2
- Target
  Common.dll
- Size 9KB
- SHA256 7d598fbbe3c1811c59a30f81fa384fd15af877d45961fe199ab9a888963ef2c3
- MD5 d718a3351fe00336d78517396e2b46e0
- SHA1 e38692da530c7802be2644810abd5bbf11ce617a
- SHA512 a87a81973d8eedc564148e6eeb0c11035ca4deef4233ab3f3b76e2ed3e882242efdb812019e96a36a38d7d24b3fd76c4ac234c98743e3e2cb91418cc437303af
- SSDEEP 192:THGXkMAidu5N0R+pgt9FEC3LvfA6llNasRFGU:aXkMu58+pK9iCLg6LoYX
- TLSH
  T17D12FA8A9778CA2FD815033AA8A30B0617B0EB0CE6126B975F709427BC6B71552613F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Installer.exe
- Size 5KB
- SHA256 b4745511b89b603c6682255cb0cecaa387bebc992917ff625b35ee4831a9386f
- MD5 9c1ad1f690939c62454256eded975e2a
- SHA1 adf3a8a3934ac4c51ef71401bcca2095aa932ae6
- SHA512 f91a1e1c526aabe1e1992c382ee88be369e20ee7e4f2044b288d4e6e93743acb3bfe92a02dbdf74b3a91947d819a1b238b2085fa50176072dfb2c656762c0c79
- SSDEEP 48:6CUfhRvucyo0lOFZPwTPyJgQ4khvj09fcO6g+Wi+JaeqCBhXOuljXiqspfbNtm:yio0ggQ4U0mOhi+1/xXuzNt
- TLSH
  T139C1540193F4526AF2778B30BEF343510570BA91AD76D75D2A84150FAD22B548DA3FB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery defense_evasion
behavioral5 behavioral6
- Target
  Uninstaller.exe
- Size 5KB
- SHA256 317da34218e8864e5a545ee93b7149252ae75923f98a01b9b139a05d507c4204
- MD5 7f0560820303d26b320acc2810ef55a2
- SHA1 b868cfcfe3163a5727f66f1eceeffc0825cb9181
- SHA512 5073c5aa3e18e1db39b1f47d1ff81aef2fe3d332535a421245e768e87139bbf748703ed9211d72824090be47d2efa4b4e34b41dd2a7d23e4c88d158c4846a766
- SSDEEP 96:vI+ss50WUueO450YcOCDQy67zpahE97xzNt:vI+ssvxZSlHz/X
- TLSH
  T1A4C19406A3F4436EE17B4B34BDF302510A70BE11AE36DB6D2980151B6D62B558DA3FB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery defense_evasion
behavioral7 behavioral8
- Target
  dinput8.dll
- Size 1.7MB
- SHA256 0427b72415bb1bab17437bca89e1af0edb52c5115edd6a198b40c12a0fc0d007
- MD5 f01febcb541c2a678406818d9840094b
- SHA1 c7165eb02890f31d3925e1ab2db6ca7fad90e4c1
- SHA512 fbdb4ad5e16541246b6cb43a0e08837e191cbb6cdd760adb9214324e902b068abf015b2d9aa1bf3168cb238ec6fe59466ec33619680741c58ddc62f8eedf8127
- SSDEEP 24576:HA/RDzfBiXznNt/UbBuC6DqiVPX58bSKnQUvB8fqePNGLcFh0lhSMXlliVRVV7bn:HMdwXznP2uZDqSCKomYL7UfVVq3Zw
- TLSH
  T12785CF50F98781B2D2D801B0717F7F6F4A39585C572050D3B3E86DAC99A02E23BBBB56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  input.vbs
- Size 973B
- SHA256 ad490366496cd4a24b1068c75a21d77e25771d573f577bab27e5de1ed9634e61
- MD5 dfd0db5ef77293170f030c6e9c8e1876
- SHA1 9c02298e861aec18f5c35904f076c6a1d6513c8f
- SHA512 294810f08566dc0def9828d16b4fa32f5ce1b0c6ccc4e74ec0fa96b20e88f95635ec02c344b0759716ac413c56109b33b4e4b1a275ed90249733b88aa3d7dd7a
- TLSH
  T1FC11E1662E4EF1A392B0865A53F3C298E34BC1783225D1C47C24C0403B18A9F4DF3D7A
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Visual Basic

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

defense_evasiondiscovery

behavioral7

behavioral8

defense_evasiondiscovery

behavioral9

behavioral10

behavioral11

behavioral12

© 2018-2026

Terms | Privacy