5000cd9c0bfaaec993eb212d21be51a0629bbc679c74bb3a122d758c059f5412

General

Target
Wave.zip
Size 27.2MB
Sample260628-vbdpbaav9m
SHA256 5000cd9c0bfaaec993eb212d21be51a0629bbc679c74bb3a122d758c059f5412
MD5 2c8b1d5f5888a718bc19a3ec4438cb6a
SHA1 30fe112d809bd1228683cfbd79fb52d409a32579
SHA512 d35c3e4353f8fa0c74b36671d672ba08067cbf0cd939293d3835462f990396a4563ff114e4da6aa018b55d787f5c55fac8e4ba16860ba62196b4210bc1ae95be
SSDEEP 786432:1R/NS1Z9iT1uawnzfCHzR+7Zjh49EwgGjMCR:7/NS1TiT4nbKR+7Z149EwgGN
TLSH
T1DC57336156A7D57B06B92EFABC4827457108A38B8C1CD4C31DFE4F18235296E1EB0DEB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Wave.zip
- Size 27.2MB
- SHA256 5000cd9c0bfaaec993eb212d21be51a0629bbc679c74bb3a122d758c059f5412
- MD5 2c8b1d5f5888a718bc19a3ec4438cb6a
- SHA1 30fe112d809bd1228683cfbd79fb52d409a32579
- SHA512 d35c3e4353f8fa0c74b36671d672ba08067cbf0cd939293d3835462f990396a4563ff114e4da6aa018b55d787f5c55fac8e4ba16860ba62196b4210bc1ae95be
- SSDEEP 786432:1R/NS1Z9iT1uawnzfCHzR+7Zjh49EwgGjMCR:7/NS1TiT4nbKR+7Z149EwgGN
- TLSH
  T1DC57336156A7D57B06B92EFABC4827457108A38B8C1CD4C31DFE4F18235296E1EB0DEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Wave/Wave.exe
- Size 8.5MB
- SHA256 9bc4a3a6d8703225b3433a5a67c6f4321e49d70ccedbbe3ac122dab331f1e6e3
- MD5 f75863b754f9a4d393f98c1734e3d091
- SHA1 ac131b494c296a465a232eb0ee2e4b447f487921
- SHA512 9e2298309bd3d851f0a61f5e534b4f278e9b75491601627c8c7240b9eba66e0ecbd09de9dcb9d463d3dd4f24b6e78b7b37ed912db6dc08c14e1f757723a8f5b2
- SSDEEP 196608:vGVF5MZhgMNv/dfXPl7OtttdTpY7A8MLybhZ0zLXv2Yrt3KuBbSWxzHKo+r8THXg:vWXMPNXd/hkvTp8DbL0zr1K+bSWxzHKV
- TLSH
  T12296232467E85663F5BD5776D8714992D7767E0A2A0BA38F2924389C0EF23C1CF32217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Enumerates processes with tasklist
  discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral2
- Target
  Wave/WaveUIAuth.dll
- Size 21.6MB
- SHA256 b23756a0ec2efcb706de378d0ef71917c49ae059201d3881d5a699b47c423558
- MD5 2ef9a7ed491edb1853cde76d970ccfa6
- SHA1 7c0da384b9f4aff28e37f14c3d2e09742a557470
- SHA512 d1c266b6419a4ecb830bc3b60f1a93a9e8dd4f2515c2726652431ef7e466a9ebe656bd73d5a818c7913c575da581bdd7c6ba47444fddd70df5a2a4bae3bcaa1f
- SSDEEP 393216:dAO3ouELbN/CcGs7BLvvuZ5VrJWcsvlGxil:53EVKcf7BLg5+coGx
- TLSH
  T1683722D974E491ACC492C631E38A2BECF0D678494E79681BBFC709412A31D86CDB6D37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral3
- Target
  Wave/WebView2Loader.dll
- Size 156KB
- SHA256 4cd3ffd5f52122432b6537b360c2317f96650928c927bb3caa59d5807da573a9
- MD5 daf9a81004a961e39650a0e2bafe233e
- SHA1 62f863adbef09905c75f475cdd5ce68b0aaaf73f
- SHA512 95f1ffa93b0c16fdbaf9eb2d9f9fdbe63b1946a7cea0e366a9c68fd4695a97c7681bf9e2b2f372c8ab6430c0a37cac733154e94b1d7a76cbfa3c1de340d5ce33
- SSDEEP 3072:8nVs+j4uIGieBiCIV6A9S4arvNQG/pTNgWEtJctHVA9rWt:gj4NCy6A9S4YcWEtJeVAk
- TLSH
  T174F34B5BB2E90077E17BC278C5A34A16E776B8111750AAEF036447791F237D0AE3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4