0ff0224edb6a27b5c23adc7fb759864bb3c645f2cf2f38d0a0290c1fa691fdd2

General

Target
WaveTrial.rar
Size 156.4MB
Sample240409-rxstksch7y
SHA256 0ff0224edb6a27b5c23adc7fb759864bb3c645f2cf2f38d0a0290c1fa691fdd2
MD5 0159c8632597db4afc30105f24cdd3ea
SHA1 5e80272c6ff0d820cdb0a4f98f7fbf0d558f5957
SHA512 587e4dc7ae21036f3aaec3e99955670ef0c457fab23db79b71f0963acc79a1f2eca61b2233b6770672a139b0f8a9ae98ad65bed2431aac476fe7d4e293e666fe
SSDEEP 3145728:GeUQUfKvWr13d8VZDUdp27PkF5oeUahBcPVyMVob2395nOl0tUD:MKuh+DU72TkF5oeVBMX3nnptUD
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

themida

Malware Config

Targets

- Target
  WaveTrial.rar
- Size 156.4MB
- SHA256 0ff0224edb6a27b5c23adc7fb759864bb3c645f2cf2f38d0a0290c1fa691fdd2
- MD5 0159c8632597db4afc30105f24cdd3ea
- SHA1 5e80272c6ff0d820cdb0a4f98f7fbf0d558f5957
- SHA512 587e4dc7ae21036f3aaec3e99955670ef0c457fab23db79b71f0963acc79a1f2eca61b2233b6770672a139b0f8a9ae98ad65bed2431aac476fe7d4e293e666fe
- SSDEEP 3145728:GeUQUfKvWr13d8VZDUdp27PkF5oeUahBcPVyMVob2395nOl0tUD:MKuh+DU72TkF5oeVBMX3nnptUD
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1
- Target
  WaveTrial/Wave.dll
- Size 15.6MB
- SHA256 0c0c9b140ac34f43a7252ec81007024bcad1d5d526762e518513ec20ff0e3a2a
- MD5 b7660cbe69220a479611763e49cd50e1
- SHA1 2a89b9e56190204f7a776b6612d89baadaef911c
- SHA512 6b5aad55413600e57a7313779aed5868da49b6502bc2543eb675d582d0ba3ed0d1a153a7fdff04353c5019ee115c1ce01748548c24b679882be1f885be31b7ed
- SSDEEP 196608:d7sdHFJiem2Ijbtm+4dqFgva0HLmhBpRK5vtWAL4Lq22+oWlsHawFM+OuKsgAyhP:WViXbtm+Kvv4Rivtz+oWXuKseRP8
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10
- Blocklisted process makes network request
behavioral2
- Target
  WaveTrial/Wave.exe
- Size 7.0MB
- SHA256 2c51f67e236cf95e2d51df4178699da09869ab077924cff0b3df1c512878ef2f
- MD5 a8bd4a6b2f1d00928e61870a5688c13d
- SHA1 e17646d5279534f2e3eb0e0cfc8b6c536bc0c095
- SHA512 6b5175beea4071668c87b16af3177bbb2cbaff6b28909dc1e09ad5b16b449c62d6adc372a0094de627fe9835f0c474d16708c3f698355ba1664bf321fa19f5fb
- SSDEEP 98304:37//YITF8r2n8TevxbFKVlXk34tZ+t4+aNG5Lhd+2G4Op0cN+hmdYkvsFLL:37//1xBVqvG5dQ2m0cN+hmdYkvsFLL
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3
- Target
  WaveTrial/chrome_elf.dll
- Size 1.3MB
- SHA256 9f455612e32e5da431c7636773e34bd08dae79403cc8cf5b782b0ea4f1955799
- MD5 5b3802f150c42ad6d24674ae78f9d3e8
- SHA1 428139f0a862128e55e5231798f7c8e2df34a92a
- SHA512 07afbd49e17d67957c65929ca7bdfe03b33b299c66c48aa738262da480ed945712d891be83d35bd42833d5465ef60e09c7a5956df0a369ec92d3bc2d25a09007
- SSDEEP 24576:LcTZORTcbxjPziCdLI3ovs8t8+oaOzjY:LcTZYTOxjPzJdEoNa+2fY
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral4
- Target
  WaveTrial/d3dcompiler_47.dll
- Size 4.7MB
- SHA256 7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
- MD5 2191e768cc2e19009dad20dc999135a3
- SHA1 f49a46ba0e954e657aaed1c9019a53d194272b6a
- SHA512 5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970
- SSDEEP 49152:KCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvhiD0N+YEzI4og/RfzHLeHTRhFRNc:xG2QCwmHPnog/pzHAo/A6l
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Blocklisted process makes network request

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5