Analysis
- max time kernel
76s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
08/07/2026, 11:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Wave.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
WaveUIAuth.dll
Resource
win11-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
WebView2Loader.dll
Resource
win11-20260513-en
0 signatures
150 seconds
General
- Target WaveUIAuth.dll
- Size 20.6MB
- Sample260708-n495nae17x
- SHA256 2f0941e4c4714d207f866861555e1606fd54e12b865b9f4d3d50ceb9f78fd403
- MD5 91ec65fcb1665c1f55198a868bb8224f
- SHA1 c244ec97d014809e568ef3611fb1bd625b52a35f
- SHA512 e1f49032fb739b7dec9f2cb17c32828c0e9117b64a44d39d9d25c82fa838a48f3dca98a153917729130ac9dc9dbdbcdee538cc0a6ed40e06d3a46f8abcb99104
- SSDEEP 393216:DBt6fSdHPPmgT9x/5qecpP3QU2cV6OkI/x0wlIWy3ZAHPoK3e3UAFW:T+2PFx/8NPsQ3x7+fIYrF
- TLSH T1B42723E524D411FCD896C630E25E2BEDF1D578494DB9A82E7FC608012F31E9BC9A2937
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 4 IoCs
pid Process 1904 rundll32.exe 1904 rundll32.exe 1904 rundll32.exe 1904 rundll32.exe