Overview
overview
7Static
static
3NovaTools_8C18+.rar
windows10-2004-x64
7NovaTools_8C18+.rar
windows11-ltsc_2024-x64
1Common.dll
windows10-2004-x64
1Common.dll
windows11-ltsc_2024-x64
1Installer.exe
windows10-2004-x64
3Installer.exe
windows11-ltsc_2024-x64
3Uninstaller.exe
windows10-2004-x64
3Uninstaller.exe
windows11-ltsc_2024-x64
3dinput8.dll
windows10-2004-x64
3dinput8.dll
windows11-ltsc_2024-x64
3input.vbs
windows10-2004-x64
5input.vbs
windows11-ltsc_2024-x64
5Analysis
- max time kernel
150s - max time network
123s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/08/2026, 14:36
Static task
static1
Behavioral task
behavioral1
Sample
NovaTools_8C18+.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
NovaTools_8C18+.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Common.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Common.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Installer.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Installer.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral7
Sample
Uninstaller.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Uninstaller.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
dinput8.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
dinput8.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
input.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
input.vbs
Resource
win11ltsc2024-20260709-en
General
- Target NovaTools_8C18+.rar
- Size 724KB
- Sample260820-rysj7sdr2v
- SHA256 2695438fe00f2012d0af10ec8ee850b6d59091e061d0d096f14e6bced31aa9f7
- MD5 089e4ca02f0e4ea53554bbc41bf41e28
- SHA1 2d77d5b06363310b632b96962492ca9e096cdc3e
- SHA512 2e3f22880905cdf6d85664c1d6b5d4d356bc2bb769303ff517d2146443536576d60a1aab78019a181fbf87b70b73180276a801e8a0481f61bc9402b2ef6aff6b
- SSDEEP 12288:vblcd1IcgYWB9pXuW/QDwnV8sjoqkHLL7QSyPAZl1/5pjKa/j9:RcdjgYWbpoKl+tUKvKE
- TLSH T1F9F423397AD6220AA4082CF8E88FDBB2E0B05E4499DD33DCF1CA7E4B40859559CDD7D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4984 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4984 7zFM.exe Token: 35 4984 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4984 7zFM.exe