1d8691b616eea3315f868a737c2a15a8090eb0e2b579e0c6651756d8a9111d3e

General

Target
payload.dat
Size 27.3MB
Sample260708-ph5tgsfw2s
SHA256 1d8691b616eea3315f868a737c2a15a8090eb0e2b579e0c6651756d8a9111d3e
MD5 f227c5fef76a6c09d8d6ac5dc8041f43
SHA1 d5647f4c483d6a0ec5f50417b117ca4c39816546
SHA512 87095be83b374e140216e06f1e7f4e1ad577aa645bdbbacd13663a71e0d626da5564c853b35083fe6908fed17b76d0bbcb2b4b3a34a92e3ec95b4f729f037cca
SSDEEP 393216:2m7NFmrlFU2UwJVSgSjX2axym6wZzM00R0nZiGbtXZS26nVBCwykDucSIxPgg5OO:IFU2xIgcXVxH6jCnEmtXAfVQIJPzwWGy
TLSH
T1345733C3A1AE12EA233F39B4F0CE488D49E06CC457B6DA25D27FC39653647D3029A5D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  payload.dat
- Size 27.3MB
- SHA256 1d8691b616eea3315f868a737c2a15a8090eb0e2b579e0c6651756d8a9111d3e
- MD5 f227c5fef76a6c09d8d6ac5dc8041f43
- SHA1 d5647f4c483d6a0ec5f50417b117ca4c39816546
- SHA512 87095be83b374e140216e06f1e7f4e1ad577aa645bdbbacd13663a71e0d626da5564c853b35083fe6908fed17b76d0bbcb2b4b3a34a92e3ec95b4f729f037cca
- SSDEEP 393216:2m7NFmrlFU2UwJVSgSjX2axym6wZzM00R0nZiGbtXZS26nVBCwykDucSIxPgg5OO:IFU2xIgcXVxH6jCnEmtXAfVQIJPzwWGy
- TLSH
  T1345733C3A1AE12EA233F39B4F0CE488D49E06CC457B6DA25D27FC39653647D3029A5D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Wave.exe
- Size 9.6MB
- SHA256 fdddc5f2d005696b1923e8192a0f66b599dbf92aff40447869f2c278a736c50c
- MD5 1852c2d25f644263c7beb6fd8183e3bd
- SHA1 380d73cc5e4edb0640a8911fcf39846974c734ca
- SHA512 d7e49f7d0fe95c1f0f00a9ab815e121024d327c28aa66e2646b2366b0f0e702ccec741d7f0adae8c236f489d423e4eb3dc51410aa395bba42943363190069b19
- SSDEEP 196608:2DyDXOliXInuU6ljcYtRRoyqgFk99AamtOjNswoTu5evlQm2mtnMUwEa9BeLibsF:2aKnd6lLBSgC99Ai5sw0u5evlQm2mtnj
- TLSH
  T128A6011897E85552D73E9B7CC126C543FEB1B886032592CF0818FD582FEB7C2A636636
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Enumerates processes with tasklist
  discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral2
- Target
  WaveUIAuth.dll
- Size 20.6MB
- SHA256 2f0941e4c4714d207f866861555e1606fd54e12b865b9f4d3d50ceb9f78fd403
- MD5 91ec65fcb1665c1f55198a868bb8224f
- SHA1 c244ec97d014809e568ef3611fb1bd625b52a35f
- SHA512 e1f49032fb739b7dec9f2cb17c32828c0e9117b64a44d39d9d25c82fa838a48f3dca98a153917729130ac9dc9dbdbcdee538cc0a6ed40e06d3a46f8abcb99104
- SSDEEP 393216:DBt6fSdHPPmgT9x/5qecpP3QU2cV6OkI/x0wlIWy3ZAHPoK3e3UAFW:T+2PFx/8NPsQ3x7+fIYrF
- TLSH
  T1B42723E524D411FCD896C630E25E2BEDF1D578494DB9A82E7FC608012F31E9BC9A2937
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral3
- Target
  WebView2Loader.dll
- Size 156KB
- SHA256 4cd3ffd5f52122432b6537b360c2317f96650928c927bb3caa59d5807da573a9
- MD5 daf9a81004a961e39650a0e2bafe233e
- SHA1 62f863adbef09905c75f475cdd5ce68b0aaaf73f
- SHA512 95f1ffa93b0c16fdbaf9eb2d9f9fdbe63b1946a7cea0e366a9c68fd4695a97c7681bf9e2b2f372c8ab6430c0a37cac733154e94b1d7a76cbfa3c1de340d5ce33
- SSDEEP 3072:8nVs+j4uIGieBiCIV6A9S4arvNQG/pTNgWEtJctHVA9rWt:gj4NCy6A9S4YcWEtJeVAk
- TLSH
  T174F34B5BB2E90077E17BC278C5A34A16E776B8111750AAEF036447791F237D0AE3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4