General
-
Target
wave.7z
-
Size
13.7MB
-
Sample
240630-fgsm4axdnq
-
MD5
66eb876122106c21f336f099597ab2ac
-
SHA1
96fe852bbe2ec0c1a791cd268b2b576ac29527ab
-
SHA256
b75a6bbe81fb87ee0edfdf119c01d940cca31122e3f582153dff76df3ac03e9d
-
SHA512
4effe8543a0c538b31fd70bfa28314da17bbf448757a06b8b97d4b3f0c395aa03a0329aad1132d1f3de92fec57035f5ac3be19d7e74818205c1daa90bc22f5e2
-
SSDEEP
393216:tzAwVxAbN98adt2M3n86QXyraKECx5zIWG2eyt4TK:tTAbN/dt2Wmi2KE6tNt4K
Static task
static1
Behavioral task
behavioral1
Sample
wave.7z
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
wave.7z
-
Size
13.7MB
-
MD5
66eb876122106c21f336f099597ab2ac
-
SHA1
96fe852bbe2ec0c1a791cd268b2b576ac29527ab
-
SHA256
b75a6bbe81fb87ee0edfdf119c01d940cca31122e3f582153dff76df3ac03e9d
-
SHA512
4effe8543a0c538b31fd70bfa28314da17bbf448757a06b8b97d4b3f0c395aa03a0329aad1132d1f3de92fec57035f5ac3be19d7e74818205c1daa90bc22f5e2
-
SSDEEP
393216:tzAwVxAbN98adt2M3n86QXyraKECx5zIWG2eyt4TK:tTAbN/dt2Wmi2KE6tNt4K
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Legitimate hosting services abused for malware hosting/C2
-