984dfc64c10f96c5350d6d9216a5d7abfece1658dfc93925f7a6b0c80817c886 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

WaveInstaller.exe

windows11-21h2-x64

8

Resubmissions

22/10/2024, 00:01 UTC

241022-abbvhawflk 10

21/10/2024, 23:58 UTC

241021-31jwmawelj 8

21/10/2024, 23:55 UTC

241021-3yrhpatgka 6

Sharing

General

Target

WaveInstaller.exe
Size

2.3MB
Sample

241021-31jwmawelj
MD5

215d509bc217f7878270c161763b471e
SHA1

bfe0a2580d54cfa28d3ff5ef8dc754fdc73adcd9
SHA256

984dfc64c10f96c5350d6d9216a5d7abfece1658dfc93925f7a6b0c80817c886
SHA512

68e615dfcb1b7770ad64175438a913744c14bdd3af93b339c2b526271bdd0d23334e78d049fdae8ca9fe66672a8cf252ebf891be9ab6c46a3d8f1fb00fa8c83b
SSDEEP

49152:LinbT3qpTDQSmanAmwJAaDMg33U2pLOiniT:LinKpTJmWAmmAMP8in

Score

8^/10

defense_evasion discovery spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

WaveInstaller.exe

Resource

win11-20241007-en

defense_evasion discovery spyware stealer

windows11-21h2-x64

21 signatures

150 seconds

Malware Config

Targets

- Target
  
  WaveInstaller.exe
- Size
  
  2.3MB
- MD5
  
  215d509bc217f7878270c161763b471e
- SHA1
  
  bfe0a2580d54cfa28d3ff5ef8dc754fdc73adcd9
- SHA256
  
  984dfc64c10f96c5350d6d9216a5d7abfece1658dfc93925f7a6b0c80817c886
- SHA512
  
  68e615dfcb1b7770ad64175438a913744c14bdd3af93b339c2b526271bdd0d23334e78d049fdae8ca9fe66672a8cf252ebf891be9ab6c46a3d8f1fb00fa8c83b
- SSDEEP
  
  49152:LinbT3qpTDQSmanAmwJAaDMg33U2pLOiniT:LinKpTJmWAmmAMP8in
Score

8^/10

defense_evasion discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

SIP and Trust Provider Hijacking

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryspywarestealer

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.