63bd5de0406b8b5db7c853bfbf3c1970519bc068d88902edee744e6b9a99ba61 | Triage

Sharing

General

Target

Wave.exe
Size

54.0MB
Sample

250319-apgb5szvby
MD5

5f4c9f3fc681ac6be5be6681396545ab
SHA1

e3d67195899364eebfb27d7d8b050a25040466b9
SHA256

63bd5de0406b8b5db7c853bfbf3c1970519bc068d88902edee744e6b9a99ba61
SHA512

5b2065e212bbbd12420022b69ae77252cf80c5b44de24b32be6107a6252405084f174df65aab411df870f347a13d54f404aa25aedfab221c999d8fc73c4beaf7
SSDEEP

393216:59nqYllR13C29oiF0U1vFEgcfn52W3K+AbcsCSmggoKlQnAliXUxR0rHa93WhlUk:Dfl6e0OBG6ZC/Lwi8rj

Score

7^/10

defense_evasion discovery execution

Malware Config

Targets

- Target
  
  Wave.exe
- Size
  
  54.0MB
- MD5
  
  5f4c9f3fc681ac6be5be6681396545ab
- SHA1
  
  e3d67195899364eebfb27d7d8b050a25040466b9
- SHA256
  
  63bd5de0406b8b5db7c853bfbf3c1970519bc068d88902edee744e6b9a99ba61
- SHA512
  
  5b2065e212bbbd12420022b69ae77252cf80c5b44de24b32be6107a6252405084f174df65aab411df870f347a13d54f404aa25aedfab221c999d8fc73c4beaf7
- SSDEEP
  
  393216:59nqYllR13C29oiF0U1vFEgcfn52W3K+AbcsCSmggoKlQnAliXUxR0rHa93WhlUk:Dfl6e0OBG6ZC/Lwi8rj
Score

7^/10

defense_evasion discovery execution
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell to get system information.
  execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Obfuscated Files or Information

Command Obfuscation

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecution

behavioral2

defense_evasiondiscoveryexecution