8886f9f1046034b3d0b1b5140849d76b6f11c62701ebba5bd1cfa819d275867d

General

Target
wave_ship.7z
Size 26.3MB
Sample260620-py2rrsez8k
SHA256 8886f9f1046034b3d0b1b5140849d76b6f11c62701ebba5bd1cfa819d275867d
MD5 5f3b9dac7dc4b5b18453a85b1f711703
SHA1 57ec05be4f9e0e64eb0feebbe23bb334fc400e69
SHA512 c554c0c01276f5a5b1e1f859cab309be0177fbd64deabc65922653faf74af119a635f5ce5ab268ca3fbf6306e3b90c45d8ab0e54cfb9a79a64cd1136b36372e7
SSDEEP 393216:vBDHUzkNNQk+gX912S9IOfe7UQ2f1p1jdDNdrie3TqZJ5XHDheRIp41EV33Elg29:RH4kNG9gN1N9qV259NdOUqhjR42VUT1j
TLSH
T10C5733CB89DA52B8333F469BDCCF08A561912DCD93A9FB16C27B274723953D3221A4C5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  wave_ship/Wave.exe
- Size 9.6MB
- SHA256 fdddc5f2d005696b1923e8192a0f66b599dbf92aff40447869f2c278a736c50c
- MD5 1852c2d25f644263c7beb6fd8183e3bd
- SHA1 380d73cc5e4edb0640a8911fcf39846974c734ca
- SHA512 d7e49f7d0fe95c1f0f00a9ab815e121024d327c28aa66e2646b2366b0f0e702ccec741d7f0adae8c236f489d423e4eb3dc51410aa395bba42943363190069b19
- SSDEEP 196608:2DyDXOliXInuU6ljcYtRRoyqgFk99AamtOjNswoTu5evlQm2mtnMUwEa9BeLibsF:2aKnd6lLBSgC99Ai5sw0u5evlQm2mtnj
- TLSH
  T128A6011897E85552D73E9B7CC126C543FEB1B886032592CF0818FD582FEB7C2A636636
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1
- Target
  wave_ship/WaveLicense.exe
- Size 172KB
- SHA256 ab58895456ac53864026ad998f59fcb1b12e8f00382fa1a710cd61a37fc2a87f
- MD5 e742836e95fa89403e76c68a9649551d
- SHA1 9081626e74e0e11ab80ec1fc8394abf5e5d0982e
- SHA512 c2d1b48b5d0ce3b6e2a778d55d820294f4916cadc6746c1b87f95945450740e0be0af46a4a41bb5d4f26e52ec1b92b561cc9bce045fb3f34b27b73e19104f97a
- SSDEEP 3072:qSPOD2n5/An3YJQWHEgRMFxZzcJP5L54JPA5y3C8soppMr8ww:ZJuxZzcJP5L54JPA5to3Mr8ww
- TLSH
  T14704E7F1BBD19CCADA26637862D6D5A1373CFEE082634B0B552426312F07BD13DD9286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  wave_ship/WaveUIAuth.dll
- Size 20.6MB
- SHA256 2f0941e4c4714d207f866861555e1606fd54e12b865b9f4d3d50ceb9f78fd403
- MD5 91ec65fcb1665c1f55198a868bb8224f
- SHA1 c244ec97d014809e568ef3611fb1bd625b52a35f
- SHA512 e1f49032fb739b7dec9f2cb17c32828c0e9117b64a44d39d9d25c82fa838a48f3dca98a153917729130ac9dc9dbdbcdee538cc0a6ed40e06d3a46f8abcb99104
- SSDEEP 393216:DBt6fSdHPPmgT9x/5qecpP3QU2cV6OkI/x0wlIWy3ZAHPoK3e3UAFW:T+2PFx/8NPsQ3x7+fIYrF
- TLSH
  T1B42723E524D411FCD896C630E25E2BEDF1D578494DB9A82E7FC608012F31E9BC9A2937
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral3
- Target
  wave_ship/WebView2Loader.dll
- Size 156KB
- SHA256 4cd3ffd5f52122432b6537b360c2317f96650928c927bb3caa59d5807da573a9
- MD5 daf9a81004a961e39650a0e2bafe233e
- SHA1 62f863adbef09905c75f475cdd5ce68b0aaaf73f
- SHA512 95f1ffa93b0c16fdbaf9eb2d9f9fdbe63b1946a7cea0e366a9c68fd4695a97c7681bf9e2b2f372c8ab6430c0a37cac733154e94b1d7a76cbfa3c1de340d5ce33
- SSDEEP 3072:8nVs+j4uIGieBiCIV6A9S4arvNQG/pTNgWEtJctHVA9rWt:gj4NCy6A9S4YcWEtJeVAk
- TLSH
  T174F34B5BB2E90077E17BC278C5A34A16E776B8111750AAEF036447791F237D0AE3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Checks whether UAC is enabled

Network Share Discovery

Suspicious use of NtSetInformationThreadHideFromDebugger

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4