General
-
Target
Wave.exe
-
Size
10.6MB
-
Sample
250228-hgfpmsvkw7
-
MD5
85d771a10894d9984d12208a8b0afaf9
-
SHA1
3ebe4abd07ca03fede973d4a8deca0f9925e22fc
-
SHA256
5850f3ba0ea2ee5bbcafe263c9b46141af7ad1cc4fbd7558b556402dc640259a
-
SHA512
dfa1118a8c7fa07650249d8dc5522ceb591a02a6979b36e251757c1efb15f13c3938dd244ae67a650f8c9df4fb2ab60762fb82bc1384ba373ed895169d0882f6
-
SSDEEP
196608:i8kwTi+sTfOgVZydzPbszX7gWmK8/IPrvzo2C9wI+QJBp:0wTipTfOgVMdzA7mRADNCFJD
Static task
static1
Behavioral task
behavioral1
Sample
Wave.exe
Resource
win7-20240903-en
Malware Config
Extracted
stealc
default
http://193.233.254.53
-
url_path
/278c2fb3d8583f0e.php
Targets
-
-
Target
Wave.exe
-
Size
10.6MB
-
MD5
85d771a10894d9984d12208a8b0afaf9
-
SHA1
3ebe4abd07ca03fede973d4a8deca0f9925e22fc
-
SHA256
5850f3ba0ea2ee5bbcafe263c9b46141af7ad1cc4fbd7558b556402dc640259a
-
SHA512
dfa1118a8c7fa07650249d8dc5522ceb591a02a6979b36e251757c1efb15f13c3938dd244ae67a650f8c9df4fb2ab60762fb82bc1384ba373ed895169d0882f6
-
SSDEEP
196608:i8kwTi+sTfOgVZydzPbszX7gWmK8/IPrvzo2C9wI+QJBp:0wTipTfOgVMdzA7mRADNCFJD
-
Stealc family
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Suspicious use of SetThreadContext
-