Overview

overview

9

Static

static

7

Wave.rar

windows10-2004-x64

9

Wave/Injector.exe

windows10-2004-x64

9

Wave/Wave.dll

windows10-2004-x64

8

Wave/Wave.exe

windows10-2004-x64

1

Wave/Wave.exe.config

windows10-2004-x64

3

Wave/dist/...c14.js

windows10-2004-x64

1

Wave/dist/...ca1.js

windows10-2004-x64

1

Wave/dist/...d33.js

windows10-2004-x64

1

Wave/dist/...x.html

windows10-2004-x64

1

Wave/dist/node.exe

windows10-2004-x64

1

Wave/dist/...dex.js

windows10-2004-x64

1

Wave/dist/...s.json

windows10-2004-x64

3

Wave/dist/...d.luau

windows10-2004-x64

3

Wave/dist/...au.exe

windows10-2004-x64

1

Wave/dist/...d.luau

windows10-2004-x64

3

Wave/dist/...t.json

windows10-2004-x64

3

Wave/dist/...d.luau

windows10-2004-x64

3

Wave/dist/...au.exe

windows10-2004-x64

1

Wave/dist/...d.luau

windows10-2004-x64

3

Wave/dist/start.cmd

windows10-2004-x64

1

Wave/dxcompiler.dll

windows10-2004-x64

1

Wave/dxil.dll

windows10-2004-x64

1

Wave/libEGL.dll

windows10-2004-x64

1

Wave/libGLESv2.dll

windows10-2004-x64

1

Wave/libcef.dll

windows10-2004-x64

1

Wave/snaps...ob.bin

windows10-2004-x64

3

Wave/v8_co...ot.bin

windows10-2004-x64

3

Wave/vk_sw...er.dll

windows10-2004-x64

1

Wave/vk_sw...d.json

windows10-2004-x64

3

Wave/vulkan-1.dll

windows10-2004-x64

1

Wave/webso...rp.dll

windows10-2004-x64

1

Wave/works..._FE.iy

windows10-2004-x64

3

Analysis

  • max time kernel
    144s
  • max time network
    311s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-04-2024 00:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Wave/Wave.dll

  • Size

    16.3MB

  • MD5

    1b183359bc079cb1f753e0c3e5125fe7

  • SHA1

    83a01c41cc6d6484a1b81d86890230ab803bd9e9

  • SHA256

    146b8694ee07c3ca91e323d5eb84ddc2800f0838e6bc56d924fa3c9edc7d022d

  • SHA512

    c879e85bb43af37308e52768013173d37d80f19e434c68da828e748a33e2235138d0d1ce04b5b51eb2534bff30d1a7d648c89978c9f06567b351ef3e955fba37

  • SSDEEP

    196608:jzk4uTyIOI9Lq+/svEq6OhQHjwjqvTV/5Vak/Qo2eP6Q1vabrzBx/0Ko0+/ox6Pi:k2s9q+/ss4Oyqv9ba8iCqrzHyLPdEtc

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 1 IoCs
  • cURL User-Agent 1 IoCs

    Uses User-Agent string associated with cURL utility.

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Wave\Wave.dll,#1
    1⤵
    • Blocklisted process makes network request
    PID:3280

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3280-0-0x00007FF967B70000-0x00007FF96978E000-memory.dmp
    Filesize

    28.1MB

    Download