Resubmissions

30/06/2024, 05:38

240630-gb8b2athjh 8

30/06/2024, 04:51

240630-fgsm4axdnq 8

General

  • Target

    wave.7z

  • Size

    13.7MB

  • Sample

    240630-fgsm4axdnq

  • MD5

    66eb876122106c21f336f099597ab2ac

  • SHA1

    96fe852bbe2ec0c1a791cd268b2b576ac29527ab

  • SHA256

    b75a6bbe81fb87ee0edfdf119c01d940cca31122e3f582153dff76df3ac03e9d

  • SHA512

    4effe8543a0c538b31fd70bfa28314da17bbf448757a06b8b97d4b3f0c395aa03a0329aad1132d1f3de92fec57035f5ac3be19d7e74818205c1daa90bc22f5e2

  • SSDEEP

    393216:tzAwVxAbN98adt2M3n86QXyraKECx5zIWG2eyt4TK:tTAbN/dt2Wmi2KE6tNt4K

Score
8/10

Malware Config

Targets

    • Target

      wave.7z

    • Size

      13.7MB

    • MD5

      66eb876122106c21f336f099597ab2ac

    • SHA1

      96fe852bbe2ec0c1a791cd268b2b576ac29527ab

    • SHA256

      b75a6bbe81fb87ee0edfdf119c01d940cca31122e3f582153dff76df3ac03e9d

    • SHA512

      4effe8543a0c538b31fd70bfa28314da17bbf448757a06b8b97d4b3f0c395aa03a0329aad1132d1f3de92fec57035f5ac3be19d7e74818205c1daa90bc22f5e2

    • SSDEEP

      393216:tzAwVxAbN98adt2M3n86QXyraKECx5zIWG2eyt4TK:tTAbN/dt2Wmi2KE6tNt4K

    Score
    8/10
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks