Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Wave-Setup.exe
-
Size
125.7MB
-
Sample
240928-d4jycsxdra
-
MD5
8c1d70e68156489fb3f1546477d256a5
-
SHA1
821f8e3a35dc71c7ce97aa154667eda442ce1339
-
SHA256
e6447a5fc5500691ea2562df9e496850f9b8095a979e4734b1ee1a5374ba5885
-
SHA512
e45d8bbbde75dc846b83a7e75d041e6ff937438f1a98adb22f69a006dee98218e97e4ba0eb3aa9392b2819d8d7341cf44353deb3beb8ed3ed2ac72dd887249f6
-
SSDEEP
3145728:ANJkAzmogRUn/57SyAPgdg3ib33ohJH69WfKNZLZM+tpk5zRB:6kYjNR7SyANib33ovaNZLc5P
Static task
static1
Behavioral task
behavioral1
Sample
Wave-Setup.exe
Resource
win11-20240802-en
Malware Config
Targets
-
-
Target
Wave-Setup.exe
-
Size
125.7MB
-
MD5
8c1d70e68156489fb3f1546477d256a5
-
SHA1
821f8e3a35dc71c7ce97aa154667eda442ce1339
-
SHA256
e6447a5fc5500691ea2562df9e496850f9b8095a979e4734b1ee1a5374ba5885
-
SHA512
e45d8bbbde75dc846b83a7e75d041e6ff937438f1a98adb22f69a006dee98218e97e4ba0eb3aa9392b2819d8d7341cf44353deb3beb8ed3ed2ac72dd887249f6
-
SSDEEP
3145728:ANJkAzmogRUn/57SyAPgdg3ib33ohJH69WfKNZLZM+tpk5zRB:6kYjNR7SyANib33ovaNZLc5P
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates processes with tasklist
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1