Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09/04/2024, 00:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Wave.dll
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Wave.dll
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
Wave.dll
-
Size
16.3MB
-
MD5
1b183359bc079cb1f753e0c3e5125fe7
-
SHA1
83a01c41cc6d6484a1b81d86890230ab803bd9e9
-
SHA256
146b8694ee07c3ca91e323d5eb84ddc2800f0838e6bc56d924fa3c9edc7d022d
-
SHA512
c879e85bb43af37308e52768013173d37d80f19e434c68da828e748a33e2235138d0d1ce04b5b51eb2534bff30d1a7d648c89978c9f06567b351ef3e955fba37
-
SSDEEP
196608:jzk4uTyIOI9Lq+/svEq6OhQHjwjqvTV/5Vak/Qo2eP6Q1vabrzBx/0Ko0+/ox6Pi:k2s9q+/ss4Oyqv9ba8iCqrzHyLPdEtc
Score
8/10
Malware Config
Signatures
-
Blocklisted process makes network request 1 IoCs
flow pid Process 9 4388 rundll32.exe -
cURL User-Agent 1 IoCs
Uses User-Agent string associated with cURL utility.
description flow ioc HTTP User-Agent header 9 curl/8.4.0