General
-
Target
WaveInstaller.exe
-
Size
2.3MB
-
Sample
240804-mjgf6stapp
-
MD5
8ad8b6593c91d7960dad476d6d4af34f
-
SHA1
0a95f110c8264cde7768a3fd76db5687fda830ea
-
SHA256
43e6ae7e38488e95741b1cad60843e7ce49419889285433eb4e697c175a153ab
-
SHA512
09b522da0958f8b173e97b31b6c7141cb67de5d30db9ff71bc6e61ca9a97c09bff6b17d6eaa03c840500996aad25b3419391af64de1c59e98ff6a8eac636b686
-
SSDEEP
49152:6inbT3qpTDQSmanAmwJAaDMg33U2pLYiniT:6inKpTJmWAmmAMPWin
Static task
static1
Behavioral task
behavioral1
Sample
WaveInstaller.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
WaveInstaller.exe
-
Size
2.3MB
-
MD5
8ad8b6593c91d7960dad476d6d4af34f
-
SHA1
0a95f110c8264cde7768a3fd76db5687fda830ea
-
SHA256
43e6ae7e38488e95741b1cad60843e7ce49419889285433eb4e697c175a153ab
-
SHA512
09b522da0958f8b173e97b31b6c7141cb67de5d30db9ff71bc6e61ca9a97c09bff6b17d6eaa03c840500996aad25b3419391af64de1c59e98ff6a8eac636b686
-
SSDEEP
49152:6inbT3qpTDQSmanAmwJAaDMg33U2pLYiniT:6inKpTJmWAmmAMPWin
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Legitimate hosting services abused for malware hosting/C2
-
MITRE ATT&CK Enterprise v15
Discovery
Network Service Discovery
1Peripheral Device Discovery
1Query Registry
2Software Discovery
1Security Software Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1