Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Wave-Setup.exe

  • Size

    125.7MB

  • Sample

    240928-d4jycsxdra

  • MD5

    8c1d70e68156489fb3f1546477d256a5

  • SHA1

    821f8e3a35dc71c7ce97aa154667eda442ce1339

  • SHA256

    e6447a5fc5500691ea2562df9e496850f9b8095a979e4734b1ee1a5374ba5885

  • SHA512

    e45d8bbbde75dc846b83a7e75d041e6ff937438f1a98adb22f69a006dee98218e97e4ba0eb3aa9392b2819d8d7341cf44353deb3beb8ed3ed2ac72dd887249f6

  • SSDEEP

    3145728:ANJkAzmogRUn/57SyAPgdg3ib33ohJH69WfKNZLZM+tpk5zRB:6kYjNR7SyANib33ovaNZLc5P

Score
7/10

Malware Config

Targets

    • Target

      Wave-Setup.exe

    • Size

      125.7MB

    • MD5

      8c1d70e68156489fb3f1546477d256a5

    • SHA1

      821f8e3a35dc71c7ce97aa154667eda442ce1339

    • SHA256

      e6447a5fc5500691ea2562df9e496850f9b8095a979e4734b1ee1a5374ba5885

    • SHA512

      e45d8bbbde75dc846b83a7e75d041e6ff937438f1a98adb22f69a006dee98218e97e4ba0eb3aa9392b2819d8d7341cf44353deb3beb8ed3ed2ac72dd887249f6

    • SSDEEP

      3145728:ANJkAzmogRUn/57SyAPgdg3ib33ohJH69WfKNZLZM+tpk5zRB:6kYjNR7SyANib33ovaNZLc5P

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates processes with tasklist

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks