General
- Target Wave_Installer.exe
- Size 17.1MB
- Sample260506-vrexbae14x
- SHA256 b0736385f1cbc4ac0cba8676c8ffc4848f1b3cd6045d590876a4796827c9d76d
- MD5 859d436c42c18a439d8d9acccc3a74f4
- SHA1 9b28445b6f470c995526c476c6ac19e903f85b95
- SHA512 de58c386fd96ed1c3e8cd272d6fcd03a7f0f77ebf52d57cff862bef9dae50fb91c81fa7e56a8e5cdf24bb373945f59e5d98e4b9200d22afacdf9778529cab44e
- SSDEEP 393216:AIyT6EecmARBbHTimfVRRJidZH0CYxMHWbHbK7z3S:nwTecm6BimNRJY7rS
- TLSH T18707334367EC83B1C7311233BA19BB456EBB382905B6F5EB0FDA047CA950521825E7B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Wave_Installer.exe
Resource
win10v2004-20260130-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Wave_Installer.exe
- Size 17.1MB
- SHA256 b0736385f1cbc4ac0cba8676c8ffc4848f1b3cd6045d590876a4796827c9d76d
- MD5 859d436c42c18a439d8d9acccc3a74f4
- SHA1 9b28445b6f470c995526c476c6ac19e903f85b95
- SHA512 de58c386fd96ed1c3e8cd272d6fcd03a7f0f77ebf52d57cff862bef9dae50fb91c81fa7e56a8e5cdf24bb373945f59e5d98e4b9200d22afacdf9778529cab44e
- SSDEEP 393216:AIyT6EecmARBbHTimfVRRJidZH0CYxMHWbHbK7z3S:nwTecm6BimNRJY7rS
- TLSH T18707334367EC83B1C7311233BA19BB456EBB382905B6F5EB0FDA047CA950521825E7B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE
-
Adds Run key to start application
-
AutoIT Executable
AutoIT scripts compiled to PE executables.