Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

WaveBootst...ve.exe

windows10-1703-x64

9

WaveBootst...ve.exe

windows10-2004-x64

9

WaveBootst...ve.exe

windows11-21h2-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    WaveBootstrapper.zip

  • Size

    79.9MB

  • Sample

    240629-p4mvss1bnn

  • MD5

    17576540ae0c2dfac659e17e161f2439

  • SHA1

    41c62b20fc4053a7cdd5cd7bcad192624fa865bb

  • SHA256

    cc469a9b34112f45c41f3ccd1fb6814a18150ab9545743a3d972a5ec86414b38

  • SHA512

    5ea4e932275a48e84f4bd172577f491bfcc92a950ab48fb9c36e8c56fdf3216727ed3326baf43232b1b2ba43b36d8870c279103eed6b515314a0026883dd546f

  • SSDEEP

    1572864:jNhT4cb5hUUA0Ylsl9+ZPZqISc/ipPIy4PPY1bOECIUO3iHWYTX:jNhT48wUAdyP6YIsASb+OSzX

Score
10/10
pysilonevasionexecutionpersistencepyinstallerupx

Malware Config

Targets

    • Target

      WaveBootstrapper/Wave.exe

    • Size

      80.4MB

    • MD5

      89f87c0513d2ce55213dd8e2eca9535e

    • SHA1

      2b4e925d984f754211b9c6ba66e2cad708130eeb

    • SHA256

      056112cf1347be1fa4095e981106f3aed76b605042697ffa75f1405345cf2a0c

    • SHA512

      611e2612fff54826d48266ec8542688d5d14907e3068850a8252641f2fd04c69b9dbb5685d8b46a2cf73700c7fb0bb4394144cb80c983a2bf70be1f1a789afcd

    • SSDEEP

      1572864:RvNBYQglZcSk8IpG7V+VPhq+EE7hlgDiYgj+h58sMwoW+9lSFcJz7:RvNBYxYSkB05aw+veN5839l17

    Score
    9/10
    evasionexecutionpersistenceupx

    • Enumerates VirtualBox DLL files

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks