Analysis
-
max time kernel
1359s -
max time network
1178s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
09-04-2024 00:29
General
-
Target
Wave/dist/shared/bin/wave-luau.exe
-
Size
3.4MB
-
MD5
12fd29fcaf6f6518b8bf9e976928fa38
-
SHA1
1f9352e217518eaceefdd041e3f085ffbb93acb0
-
SHA256
d38d6297b4653f30397b7f45964ed99a70c8ab73d60063f68d3380c309e626a4
-
SHA512
b0c5bfb87639585564915f284ecff5af7e6664097ea3d9df6908c08ce09f9f6c31912225620bb7f7cf818efd6a7146280ce37e10ca7fb55bd381b95bb8a2189b
-
SSDEEP
49152:EIo5oIIIVWVNNNNNPpXqyJh0jtX6YNimufCiZ8ylLyfMAXyDiw1P6bNi/xeLZQpV:2hugpuTcdyPs+GJH/
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Wave\dist\shared\bin\wave-luau.exe"C:\Users\Admin\AppData\Local\Temp\Wave\dist\shared\bin\wave-luau.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD50752dc77d41989e53ff3a91077376a1f
SHA1c39c44b73098f2f38148e9ac618f71d9edd19477
SHA256c0259fc020b59eddf49053eaac7d2c11ef4462fa106118b41406711168eb4f09
SHA51202418eb23c162320c9113c3863d17dba2f599cae02de3096a47c4ddc69334aac1d9f774d894c27ec02699df2150a4da5ad3318f2b4b18bf647554c6903e5656b
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB