Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

02/08/2024, 18:56

240802-xlkxgswbpn 3

02/08/2024, 18:52

240802-xh1tjawapp 8

02/08/2024, 18:48

240802-xf8flazhqe 3

General

  • Target

    WaveWindows.exe

  • Size

    8.0MB

  • Sample

    240802-xh1tjawapp

  • MD5

    b8631bbd78d3935042e47b672c19ccc3

  • SHA1

    cd0ea137f1544a31d2a62aaed157486dce3ecebe

  • SHA256

    9cfda541d595dc20a55df5422001dfb58debd401df3abff21b1eee8ede28451c

  • SHA512

    0c51d6247e39f7851538a5916b24972e845abfe429f0abdc7b532f654b4afe73dc6e1936f1b062da63bfc90273d3cbc297bf6c802e615f3711d0f180c070aa26

  • SSDEEP

    196608:0G5rY45g686QOL+rSYG6rBQ5I1NkSI4A/zLWYnI2RtCKkVJI55mTS4:0erY4G686QOSrSYXNkSALPvz5IH

Malware Config

Targets

    • Target

      WaveWindows.exe

    • Size

      8.0MB

    • MD5

      b8631bbd78d3935042e47b672c19ccc3

    • SHA1

      cd0ea137f1544a31d2a62aaed157486dce3ecebe

    • SHA256

      9cfda541d595dc20a55df5422001dfb58debd401df3abff21b1eee8ede28451c

    • SHA512

      0c51d6247e39f7851538a5916b24972e845abfe429f0abdc7b532f654b4afe73dc6e1936f1b062da63bfc90273d3cbc297bf6c802e615f3711d0f180c070aa26

    • SSDEEP

      196608:0G5rY45g686QOL+rSYG6rBQ5I1NkSI4A/zLWYnI2RtCKkVJI55mTS4:0erY4G686QOSrSYXNkSALPvz5IH

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks