General
- Target Wave.zip
- Size 26.9MB
- Sample260708-pcx7fsgs5n
- SHA256 ac57f609e56f7344803951e35e37df8ecffba52291e9593bb1616be57cc092e5
Score
8/10
Malware Config
Targets
-
- Target Wave.exe
- Size 9.6MB
- SHA256 fdddc5f2d005696b1923e8192a0f66b599dbf92aff40447869f2c278a736c50c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Network Share Discovery
Attempt to gather information on host network.
-
Enumerates processes with tasklist
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target WaveUIAuth.dll
- Size 20.6MB
- SHA256 2f0941e4c4714d207f866861555e1606fd54e12b865b9f4d3d50ceb9f78fd403
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target WebView2Loader.dll
- Size 156KB
- SHA256 4cd3ffd5f52122432b6537b360c2317f96650928c927bb3caa59d5807da573a9
Score1/10
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Network Share Discovery
1Peripheral Device Discovery
2Process Discovery
1Query Registry
4Remote System Discovery
1System Information Discovery
5System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1