General

  • Target

    Wave.zip

  • Size

    13.8MB

  • Sample

    241110-3c5s7awqfv

  • MD5

    2ea0e55f9dd137c404584361f1a39d0f

  • SHA1

    3ce0ff2e0e36368573ba661b6e9265aa88189b4b

  • SHA256

    fe91d9508770ae8da265e38fa1bb7faf8346869584f15be43bd1a42843a30e78

  • SHA512

    5eb6f1973fd32d58a3e925a67ca508a281e0c6ea624202dad1326d432cbe4b0714856bf6c5204781f06344e4e1245c020f74a334392757cd7fd9679b3c4e10dd

  • SSDEEP

    393216:VLBDGzg05Dwzu1qzekU1dp3M1qplF8+h20xGai8G70IcWo:VLBDGzg05MziOekU1dy1UkcxG38G7Po

Score
8/10

Malware Config

Targets

    • Target

      Wave/CefSharp.Core.Runtime.dll

    • Size

      1.3MB

    • MD5

      09cba584aa0aae9fc600745567393ef6

    • SHA1

      bbd1f93cb0db9cf9e01071b3bed1b4afd6e31279

    • SHA256

      0babd84d4e7dc2713e7265d5ac25a3c28d412e705870cded6f5c7c550a5bf8d5

    • SHA512

      5f914fa33a63a6d4b46f39c7279687f313728fd5f8437ec592369a2da3256ccff6f325f78ace0e6d3a2c37da1f681058556f7603da13c45b03f2808f779d2aa1

    • SSDEEP

      24576:5Ac2t6Twn/0ke6ruDPMY0BQJzTzAC991g44ekgpqc4CQKZi5P9xh0gsWLgiHesms:q6TmQJrXg44ekgpqc4CQKZi5P9xh0gsI

    Score
    3/10
    • Target

      Wave/README.txt

    • Size

      2KB

    • MD5

      205efb39cc2e3e2de639ab177fb21cad

    • SHA1

      7159ff05daf0b0a8076bc7474d0e5e2a0f92ec01

    • SHA256

      6faec04f198af329cc31b9ffe78c76a7afac0e603f2c4878099de708c76a73a2

    • SHA512

      546669fed0f6f6d0019d0912a3088bd76f2ac5b5038a99c7396b8ad6701c0c5c1ce6d17617054c358d4eefe158943b885b046bb4d512f9d95ffbe0e5016cd0b7

    Score
    3/10
    • Target

      Wave/Wave (2)/CefSharp.Core.Runtime.dll

    • Size

      1.3MB

    • MD5

      09cba584aa0aae9fc600745567393ef6

    • SHA1

      bbd1f93cb0db9cf9e01071b3bed1b4afd6e31279

    • SHA256

      0babd84d4e7dc2713e7265d5ac25a3c28d412e705870cded6f5c7c550a5bf8d5

    • SHA512

      5f914fa33a63a6d4b46f39c7279687f313728fd5f8437ec592369a2da3256ccff6f325f78ace0e6d3a2c37da1f681058556f7603da13c45b03f2808f779d2aa1

    • SSDEEP

      24576:5Ac2t6Twn/0ke6ruDPMY0BQJzTzAC991g44ekgpqc4CQKZi5P9xh0gsWLgiHesms:q6TmQJrXg44ekgpqc4CQKZi5P9xh0gsI

    Score
    3/10
    • Target

      Wave/Wave (2)/README.txt

    • Size

      2KB

    • MD5

      205efb39cc2e3e2de639ab177fb21cad

    • SHA1

      7159ff05daf0b0a8076bc7474d0e5e2a0f92ec01

    • SHA256

      6faec04f198af329cc31b9ffe78c76a7afac0e603f2c4878099de708c76a73a2

    • SHA512

      546669fed0f6f6d0019d0912a3088bd76f2ac5b5038a99c7396b8ad6701c0c5c1ce6d17617054c358d4eefe158943b885b046bb4d512f9d95ffbe0e5016cd0b7

    Score
    3/10
    • Target

      Wave/Wave (2)/bin/Background.mp4

    • Size

      4.6MB

    • MD5

      9782180eb68f73030fe24ef6a1735932

    • SHA1

      589827fe098ba048c9f871a28db8eae3e3537ff4

    • SHA256

      3a1cbb800f8f25c2ab703ba8bfdb01e938e4143c3bc0fea8ca734fb5ba779ba7

    • SHA512

      dc768638bae2d6d47d8910252ae64a656d8a6fd88efdf24165ddce51b7afdb4acb3fddd41dfe788737a2cab4fab66174db2f0d2f48bc8669af76d1656bca8be1

    • SSDEEP

      98304:xs/6Ldccul3Wn48btjNEkPSFTaIwJ0Mt6KNY:xs/Gul3EvEmFItMkb

    Score
    6/10
    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target

      Wave/Wave (2)/bin/lz4.dll

    • Size

      117KB

    • MD5

      f7e2f224f8dbe22012c7ff20590b8770

    • SHA1

      99775e038e306a2b5f73f6e7d8d42a5799ace824

    • SHA256

      c62f829bc0f820bca6bf14b380b285a169cd1395df864bbec692f8ca31bc4e70

    • SHA512

      96d2938cd77b48e4efdc7212a92327ac5ce43ad757fcff88eb5cbd3eb2fac1bbcaa2e119881f3cb902c634db8ef16e69146ebfe972ab0ecb2cf3b769e0818f89

    • SSDEEP

      1536:FVP0R6tS1m4baJ1ocCcl+DBZD5C3gTg60bEior69ggjpA38Ajcqv:Fxy9bs1oTfBZDugTgpbEXh0A38AYk

    Score
    1/10
    • Target

      Wave/Wave (2)/bin/wolfssl.dll

    • Size

      1.2MB

    • MD5

      a396ee8375252d04da31676fe1b3ff75

    • SHA1

      57aee1e5b69a85d0e0b7d5a103ddb683f0204cce

    • SHA256

      7dc3aeda7518abb376a6932583669e7e1595a656edeae65af1397807322e8a25

    • SHA512

      ff755bed789869a8cc2adc05b7a3b234ef93997b1774cc719d506ce4dd03fcd0ed6d320a13d815e27a21ebdf99f3308ea47a8de6b9a25ca4eaa8fb4045fbb0db

    • SSDEEP

      24576:yoCqsxtqSepCBr5fFrHodqht+tmiw9P9TsdJRV5Wodh8NHmoz:3CzASep0r5fFrHoUht+tU9TsrRV5WodE

    Score
    1/10
    • Target

      Wave/Wave (2)/bin/xxhash.dll

    • Size

      45KB

    • MD5

      161bd3d60228dd16c54a927250af3e49

    • SHA1

      463243c3cc2e0bca16f3ced2c3b70c13a0e97fa6

    • SHA256

      ecb5aa2bf0ff355a7b36bb3a991264655e13e0f2c9e88b9dfa39d7fe4c5142a7

    • SHA512

      3716ce34c1e9931007f374685a6588bc355e942872e7a42eaa4c5be9a0fdc93f081a1dc5c3d8fec4a4563dbd556f4d046f7bf3d50840c02d8aa822eaca7a577b

    • SSDEEP

      768:I9otvM7DZ1LMDJdj+LVvgFlJus4zBOQdlyR0/A:I9UEDLMDJxKM0scUS

    Score
    1/10
    • Target

      Wave/Wave (2)/bin/zlib1.dll

    • Size

      87KB

    • MD5

      f6fc96cfccdd9958a157546faa4c13a9

    • SHA1

      ae8e4171a0583a761ae4428e5757daeedaf2a157

    • SHA256

      231e29c228652e9d6504e608a1cc53311e762cd4c78deb7c9ef11bc27f13d3da

    • SHA512

      fb983083b5c620616d2547a7903f8ebfd2ad52ed9bdde8264b6e555fb47644c488779d3ade52f5e601dbc31e67f40ea973f41f45af242790dc5d8a91c163c8dc

    • SSDEEP

      1536:Q7wjHHWwn1rhEzjEp70E2thqlz4bqIOcIOZFkGnd02H:QcjH2w1EjEpIq6b4SZFfndjH

    Score
    1/10
    • Target

      Wave/Wave (2)/bin/zstd.dll

    • Size

      634KB

    • MD5

      59c9f23830bfb7b4fdc81bbd1e719810

    • SHA1

      e58049c836931a22768ce2e4502b3a856e2ecd18

    • SHA256

      9c37186c40d01e0ed9a42846c66aba449be5fe6c2da18ef6794422b5fa2ff8eb

    • SHA512

      b52f1d0e764159453ddebd70665c3a43c61e963651cf671db8994c74f2dd35dcfc79b2c4d19c5e8d6c8564c824285426c1ec651b02f1956d331447e9405212ff

    • SSDEEP

      12288:iilkxK/S1adDEh1qMkUFZe8/pJcOAAqy:iilkb1adDEh1qMkYZe8/pJxAAZ

    Score
    1/10
    • Target

      Wave/Wave (2)/d3dcompiler_47.dll

    • Size

      3.9MB

    • MD5

      3b4647bcb9feb591c2c05d1a606ed988

    • SHA1

      b42c59f96fb069fd49009dfd94550a7764e6c97c

    • SHA256

      35773c397036b368c1e75d4e0d62c36d98139ebe74e42c1ff7be71c6b5a19fd7

    • SHA512

      00cd443b36f53985212ac43b44f56c18bf70e25119bbf9c59d05e2358ff45254b957f1ec63fc70fb57b1726fd8f76ccfad8103c67454b817a4f183f9122e3f50

    • SSDEEP

      49152:OS7PQ+besnXqRtHKzhwSsz6Ku1FVVOsLQuouM0MeAD36FqxLfeIgSNwLTzHiU2Ir:O4PhqqFVUsLQl6FqVCLTzHxJIMd

    Score
    3/10
    • Target

      Wave/WaveWindows-nc.exe

    • Size

      5.5MB

    • MD5

      89dc0d52909f36a7ed98e61bcbb29f20

    • SHA1

      c371bfc5dc21308ddeac7a29349536e235901668

    • SHA256

      164796bd7ab0eecf3fdfe07985ca923b29813303ba5c85243227d2957e0d0b9c

    • SHA512

      c2c76809b52a2ea245d0d94350e4937dce471630d87ab75f40639d527ea4e7534ded2b09051ff871fa542c4d9bcccb03b5158679f5f19c075b48906acffadbed

    • SSDEEP

      49152:38AVkk00w+5h164l8kh8kZo8xrsVUcUhXijy5EiEO/x5z5p5FjoGsUrP+q7g0wBG:sqkkV5H8JVUcUfEiyx9bY

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Target

      Wave/bin/Background.mp4

    • Size

      4.6MB

    • MD5

      9782180eb68f73030fe24ef6a1735932

    • SHA1

      589827fe098ba048c9f871a28db8eae3e3537ff4

    • SHA256

      3a1cbb800f8f25c2ab703ba8bfdb01e938e4143c3bc0fea8ca734fb5ba779ba7

    • SHA512

      dc768638bae2d6d47d8910252ae64a656d8a6fd88efdf24165ddce51b7afdb4acb3fddd41dfe788737a2cab4fab66174db2f0d2f48bc8669af76d1656bca8be1

    • SSDEEP

      98304:xs/6Ldccul3Wn48btjNEkPSFTaIwJ0Mt6KNY:xs/Gul3EvEmFItMkb

    Score
    6/10
    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target

      Wave/bin/lz4.dll

    • Size

      117KB

    • MD5

      f7e2f224f8dbe22012c7ff20590b8770

    • SHA1

      99775e038e306a2b5f73f6e7d8d42a5799ace824

    • SHA256

      c62f829bc0f820bca6bf14b380b285a169cd1395df864bbec692f8ca31bc4e70

    • SHA512

      96d2938cd77b48e4efdc7212a92327ac5ce43ad757fcff88eb5cbd3eb2fac1bbcaa2e119881f3cb902c634db8ef16e69146ebfe972ab0ecb2cf3b769e0818f89

    • SSDEEP

      1536:FVP0R6tS1m4baJ1ocCcl+DBZD5C3gTg60bEior69ggjpA38Ajcqv:Fxy9bs1oTfBZDugTgpbEXh0A38AYk

    Score
    1/10
    • Target

      Wave/bin/wolfssl.dll

    • Size

      1.2MB

    • MD5

      a396ee8375252d04da31676fe1b3ff75

    • SHA1

      57aee1e5b69a85d0e0b7d5a103ddb683f0204cce

    • SHA256

      7dc3aeda7518abb376a6932583669e7e1595a656edeae65af1397807322e8a25

    • SHA512

      ff755bed789869a8cc2adc05b7a3b234ef93997b1774cc719d506ce4dd03fcd0ed6d320a13d815e27a21ebdf99f3308ea47a8de6b9a25ca4eaa8fb4045fbb0db

    • SSDEEP

      24576:yoCqsxtqSepCBr5fFrHodqht+tmiw9P9TsdJRV5Wodh8NHmoz:3CzASep0r5fFrHoUht+tU9TsrRV5WodE

    Score
    1/10
    • Target

      Wave/bin/xxhash.dll

    • Size

      45KB

    • MD5

      161bd3d60228dd16c54a927250af3e49

    • SHA1

      463243c3cc2e0bca16f3ced2c3b70c13a0e97fa6

    • SHA256

      ecb5aa2bf0ff355a7b36bb3a991264655e13e0f2c9e88b9dfa39d7fe4c5142a7

    • SHA512

      3716ce34c1e9931007f374685a6588bc355e942872e7a42eaa4c5be9a0fdc93f081a1dc5c3d8fec4a4563dbd556f4d046f7bf3d50840c02d8aa822eaca7a577b

    • SSDEEP

      768:I9otvM7DZ1LMDJdj+LVvgFlJus4zBOQdlyR0/A:I9UEDLMDJxKM0scUS

    Score
    1/10
    • Target

      Wave/bin/zlib1.dll

    • Size

      87KB

    • MD5

      f6fc96cfccdd9958a157546faa4c13a9

    • SHA1

      ae8e4171a0583a761ae4428e5757daeedaf2a157

    • SHA256

      231e29c228652e9d6504e608a1cc53311e762cd4c78deb7c9ef11bc27f13d3da

    • SHA512

      fb983083b5c620616d2547a7903f8ebfd2ad52ed9bdde8264b6e555fb47644c488779d3ade52f5e601dbc31e67f40ea973f41f45af242790dc5d8a91c163c8dc

    • SSDEEP

      1536:Q7wjHHWwn1rhEzjEp70E2thqlz4bqIOcIOZFkGnd02H:QcjH2w1EjEpIq6b4SZFfndjH

    Score
    1/10
    • Target

      Wave/bin/zstd.dll

    • Size

      634KB

    • MD5

      59c9f23830bfb7b4fdc81bbd1e719810

    • SHA1

      e58049c836931a22768ce2e4502b3a856e2ecd18

    • SHA256

      9c37186c40d01e0ed9a42846c66aba449be5fe6c2da18ef6794422b5fa2ff8eb

    • SHA512

      b52f1d0e764159453ddebd70665c3a43c61e963651cf671db8994c74f2dd35dcfc79b2c4d19c5e8d6c8564c824285426c1ec651b02f1956d331447e9405212ff

    • SSDEEP

      12288:iilkxK/S1adDEh1qMkUFZe8/pJcOAAqy:iilkb1adDEh1qMkYZe8/pJxAAZ

    Score
    1/10
    • Target

      Wave/d3dcompiler_47.dll

    • Size

      3.9MB

    • MD5

      3b4647bcb9feb591c2c05d1a606ed988

    • SHA1

      b42c59f96fb069fd49009dfd94550a7764e6c97c

    • SHA256

      35773c397036b368c1e75d4e0d62c36d98139ebe74e42c1ff7be71c6b5a19fd7

    • SHA512

      00cd443b36f53985212ac43b44f56c18bf70e25119bbf9c59d05e2358ff45254b957f1ec63fc70fb57b1726fd8f76ccfad8103c67454b817a4f183f9122e3f50

    • SSDEEP

      49152:OS7PQ+besnXqRtHKzhwSsz6Ku1FVVOsLQuouM0MeAD36FqxLfeIgSNwLTzHiU2Ir:O4PhqqFVUsLQl6FqVCLTzHxJIMd

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks