Overview

overview

7

Static

static

3

NovaLauncher.exe

windows10-2004-x64

7

NovaLauncher.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    151s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    16/09/2026, 11:56

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    NovaLauncher.exe
  • Size 67.3MB
  • Sample260916-n32rwsty6m
  • SHA256 82cb4b8013191bf86bf54a6156bb9b96c5896c6f2687f22a15d4a8bb0d7e8841
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 52 IoCs
  • Suspicious behavior: EnumeratesProcesses 49 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NovaLauncher.exe
    "C:\Users\Admin\AppData\Local\Temp\NovaLauncher.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4620

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        D3DCompiler_47_cor3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\D3DCompiler_47_cor3.dll
        • Size 4.5MB
        • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectWriteForwarder.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\DirectWriteForwarder.dll
        • Size 256KB
        • SHA256 9c8abfd68a61b3ddd7c77aa07938dbdbf0e14630faa4e4f8e147825edfebe87d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Win32.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\Microsoft.Win32.Primitives.dll
        • Size 16KB
        • SHA256 da324ad6c1e5c57b6dfe2a2b2b09034cb7f64beb6ab215068e0a8f1ae3237512
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Win32.Registry.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\Microsoft.Win32.Registry.dll
        • Size 56KB
        • SHA256 5e090f30c89be34195637a26861e1fd7aaa2ce5e6a295d8cb577c1f5e84b0e45
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        NovaLauncher.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\NovaLauncher.dll
        • Size 304KB
        • SHA256 2a94dce604708936091e4d18fe43f167a0586bd2f70c8b0978b7c105fdb7a4c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationCore.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\PresentationCore.dll
        • Size 3.3MB
        • SHA256 cdd7299638e4c0e4ccd65255a2d8ada9ce533c39918eb096794da6420bfe05c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationFramework-SystemXml.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\PresentationFramework-SystemXml.dll
        • Size 20KB
        • SHA256 ceb88576aa468b3040d10653487d738117b127073e4184c7230a1d2de045bbe8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationFramework.Aero2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\PresentationFramework.Aero2.dll
        • Size 252KB
        • SHA256 7e538292f5dea488eedb23f51cabefc6c2c31a2896b2039cef221e864b98c9cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationFramework.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\PresentationFramework.dll
        • Size 5.7MB
        • SHA256 b12c1b25051d60692efc217f099e2c78a5a1edd1ed922aea95214b49e17682a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationNative_cor3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\PresentationNative_cor3.dll
        • Size 1.2MB
        • SHA256 3fb36edaa2c4fe4ac8be075a3a4e903da159bbe38fb77e51c32b58e2adecb2d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.Concurrent.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Collections.Concurrent.dll
        • Size 88KB
        • SHA256 b235eaa801f697c8a4cdfb07e6e38a2fcfc0a09e1d94381b47a56959116b2d14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.NonGeneric.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Collections.NonGeneric.dll
        • Size 48KB
        • SHA256 9a24e3d552a3aa44f7c7b70fab8e38b3a2e09bb8f2d404c5ae7efde04e936c6b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.Specialized.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Collections.Specialized.dll
        • Size 48KB
        • SHA256 4046a4613172f16cff6e5b4945096c0b6b0fa65a58501ae9cc9eebc7c441b117
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Collections.dll
        • Size 104KB
        • SHA256 1450a0e2679574c9b4d699318a0b9edaeb12b019f973b6217c2444c4e23eb7fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.ComponentModel.Primitives.dll
        • Size 44KB
        • SHA256 4a1930a7832730842c2d208b1d936b3f26265085e023c78a398c630b97d856f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.TypeConverter.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.ComponentModel.TypeConverter.dll
        • Size 300KB
        • SHA256 718b873980a0394e4cfd11b379239f1ebebe4141e37cb4ab5666024c598ed9cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.ComponentModel.dll
        • Size 20KB
        • SHA256 19373c51b8d82cd1b4faecf0424f75ae752e3b344a436e2db7490ab7e8880fe7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Configuration.ConfigurationManager.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Configuration.ConfigurationManager.dll
        • Size 436KB
        • SHA256 dfc47232e0b4fe8d192426601134ca0675917042b60f92866b77632cf9884e7a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.Debug.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Diagnostics.Debug.dll
        • Size 16KB
        • SHA256 8e823bbce56b25e05f7f6319fae8dd2092aa456ffd390c5a80d403f3d432c399
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.DiagnosticSource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Diagnostics.DiagnosticSource.dll
        • Size 164KB
        • SHA256 b78a2eb814dcc18434608d827956d0df3a02168ca3ab92d54b614b12a80a36c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.Process.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Diagnostics.Process.dll
        • Size 144KB
        • SHA256 4df10650038f71d944ad23439d04773c7b5a2781b22d985a74fdd0ee96d7d1a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.TraceSource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Diagnostics.TraceSource.dll
        • Size 60KB
        • SHA256 f74a0dc36ceadae9e564ed01c86d026377751001439760f459e24e76918d0708
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.Tracing.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Diagnostics.Tracing.dll
        • Size 20KB
        • SHA256 20864b3fd3080638c26f3b679166c454fac79c7f654a4be9e6bb08052332bfe7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.IO.Packaging.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.IO.Packaging.dll
        • Size 140KB
        • SHA256 a6688f8b63af2053bac5e892329c7b2673833342d6fe9cdefff56d7580d86ca3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Linq.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Linq.dll
        • Size 164KB
        • SHA256 568ca19e359108f05a725f84b0cf33e9dd807426d9948bcfb48ddf5b1eb1f54c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Management.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Management.dll
        • Size 308KB
        • SHA256 ca14e80eb0423ca3807c3cfa8ee9a044804d284dc42f6ec9f46a2e460029a787
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Memory.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Memory.dll
        • Size 56KB
        • SHA256 596328e8e8db851b5a4c4209af1789c9745e4624fcdab6debbe9a666f671f307
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Http.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Net.Http.dll
        • Size 644KB
        • SHA256 533c887277dc709682e744db907830320824b9820d352fa69a5111adb59c8be6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Net.Primitives.dll
        • Size 100KB
        • SHA256 cd7d0fcef409e746f162f2b044ec3f39dabe1e34e1f6fc345026d7def936fa3d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Security.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Net.Security.dll
        • Size 260KB
        • SHA256 f1a47ab1804a11fd6588c6ba09d91e3a4255ff243aafce55ed02e8f1b333de65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.WebClient.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Net.WebClient.dll
        • Size 72KB
        • SHA256 7d61719a957fdcbdcbf4af77bd515a82726b2ed818100dc97341b8d421d877bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ObjectModel.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.ObjectModel.dll
        • Size 40KB
        • SHA256 d97b3200440807831e9a5d254f050ef36fbacc04dcce73111033131e0473b9c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.CoreLib.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Private.CoreLib.dll
        • Size 4.5MB
        • SHA256 995a2b0e86573681a1b5268be1071f3984bfd2bf9063c417fb92f32aaf6b5b6f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.Uri.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Private.Uri.dll
        • Size 104KB
        • SHA256 5d15823b4d508b24038d44700a6cd6c662653f1076e382c1b6da71836ee55196
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.Xml.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Private.Xml.dll
        • Size 3.0MB
        • SHA256 b24787c1916bcb5f57b97266078457d4e2b4050eebe005901230cf827673d2b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.CompilerServices.VisualC.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Runtime.CompilerServices.VisualC.dll
        • Size 20KB
        • SHA256 77873ffbe48ce737087536ba6ca093c1e97f0752a63210f0f28789653457b566
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.Extensions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Runtime.Extensions.dll
        • Size 20KB
        • SHA256 6cf91959344c53d90b0530f2d641ea64bcebe131a8fa165688f5586e877e3648
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.InteropServices.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Runtime.InteropServices.dll
        • Size 60KB
        • SHA256 b5751ecb83373a59bb58de11d37a539850cd43942c2ca746928c474497ab7c2f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.Loader.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Runtime.Loader.dll
        • Size 16KB
        • SHA256 68a1b6d39aa38f867affd899d0497df0402cd3f3b5408a67e5a8bf7d63f64e5f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Runtime.dll
        • Size 44KB
        • SHA256 e028211a7732defc0b145f45d14f35d8be47c4e0a1861b53b0b205d585c83f35
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Security.Cryptography.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Security.Cryptography.dll
        • Size 748KB
        • SHA256 3d49ed453f56d2729da380213cf7d4ffa3f4d142ba96565c60fdfb18a2a13084
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Threading.Thread.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Threading.Thread.dll
        • Size 16KB
        • SHA256 04af97b657a8b6baa3f7ef0d9bc522d44fe8a6f29e680154ddca6048eaaeeb00
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Threading.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Threading.dll
        • Size 44KB
        • SHA256 d83ce33e3ecd1e52c4b3eb20c26b235a524448ed34344b22e2d9d55f9f54a0d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Windows.Controls.Ribbon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Windows.Controls.Ribbon.dll
        • Size 736KB
        • SHA256 42be166ecc136779006522edb0154e6233e470b5d93f6fea2b3c9920811ab96b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Windows.Extensions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Windows.Extensions.dll
        • Size 72KB
        • SHA256 9cd18037c210d6bff9258004648a82fb8c1a4f9478ad1ad40153602d648820c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Xaml.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Xaml.dll
        • Size 568KB
        • SHA256 0b4a4a8eb827ecafefff05a47b64f5423904a1f1a3c59e23db61b0410ece7e9c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Xml.ReaderWriter.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\System.Xml.ReaderWriter.dll
        • Size 24KB
        • SHA256 a7d3c64813ccb883c3fa6fe3536aed688de526888eb02ea84c4cd488c1b1a2d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UIAutomationProvider.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\UIAutomationProvider.dll
        • Size 44KB
        • SHA256 702412dd1f8ce74ffe3d60d8a37d59f36049b15847cbd902441926f94ea53fb9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UIAutomationTypes.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\UIAutomationTypes.dll
        • Size 224KB
        • SHA256 9163c903db6ffc76fbb04422ffaee36d93add11dfa07388efab86d7318f0eb1f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WindowsBase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\WindowsBase.dll
        • Size 1.0MB
        • SHA256 7779d9526b8075757af2d83858a2252adc2d251e0d3dc39dec18c96e3881a8ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wpfgfx_cor3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\NovaLauncher\kIG8oda6_e-K\wpfgfx_cor3.dll
        • Size 1.9MB
        • SHA256 5a3e8766965f76a7cc0a3ba15db615ea009d4414b4cf4290c1cb59b211b8f68d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download