Overview

overview

4

Static

static

1

voicewave_...66.exe

windows10-2004-x64

4

voicewave_...66.exe

windows11-ltsc_2024-x64

4

$TEMP/evw_...er.exe

windows10-2004-x64

3

$TEMP/evw_...er.exe

windows11-ltsc_2024-x64

3

$TEMP/evw_...re.ini

windows10-2004-x64

1

$TEMP/evw_...re.ini

windows11-ltsc_2024-x64

1

$TEMP/evw_...ig.ini

windows10-2004-x64

1

$TEMP/evw_...ig.ini

windows11-ltsc_2024-x64

1

$TEMP/evw_...ap.dll

windows10-2004-x64

3

$TEMP/evw_...ap.dll

windows11-ltsc_2024-x64

3

$TEMP/evw_...xe.exe

windows10-2004-x64

3

$TEMP/evw_...xe.exe

windows11-ltsc_2024-x64

3

$TEMP/evw_...up.exe

windows10-2004-x64

3

$TEMP/evw_...up.exe

windows11-ltsc_2024-x64

3

$TEMP/evw_...rt.pem

windows10-2004-x64

3

$TEMP/evw_...rt.pem

windows11-ltsc_2024-x64

3

$TEMP/evw_...rl.dll

windows10-2004-x64

3

$TEMP/evw_...rl.dll

windows11-ltsc_2024-x64

3

$TEMP/evw_...40.dll

windows10-2004-x64

3

$TEMP/evw_...40.dll

windows11-ltsc_2024-x64

3

$TEMP/evw_...b1.dll

windows10-2004-x64

3

$TEMP/evw_...b1.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    voicewave_installer_20260727.1785164273312b5517666.exe
  • Size 3.6MB
  • Sample260727-scrw8abf42
  • SHA256 2ec319eeabd3ec839cc82f28dcb6e86e6f2d5c6e09a4ac1b444e80fe4413aca5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
discoveryexecution

Malware Config

Targets

    • Target
      voicewave_installer_20260727.1785164273312b5517666.exe
    • Size 3.6MB
    • SHA256 2ec319eeabd3ec839cc82f28dcb6e86e6f2d5c6e09a4ac1b444e80fe4413aca5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    discovery
    behavioral1behavioral2
    • Target
      $TEMP/evw_setup/1.0.0/46free/EDownloader.exe
    • Size 3.4MB
    • SHA256 09fc252661481ea65e23c90babdb7801be6b77dc5db3095cf726372d0d80ff0a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      $TEMP/evw_setup/1.0.0/46free/InitConfigure.ini
    • Size 279B
    • SHA256 bc100e3c898b6aab4f9a097e9a00840492bcd70426f0b0a744d3b1adc0327945
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      $TEMP/evw_setup/1.0.0/46free/aliyun/AliyunConfig.ini
    • Size 1KB
    • SHA256 6a42f729fe4a2ed94581398ad25e55c29b65df9faa0ef38dddf66198b35a365b
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      $TEMP/evw_setup/1.0.0/46free/aliyun/AliyunWrap.dll
    • Size 482KB
    • SHA256 544b2bf4ccdaeaf6ce8f3e0d4faa98281ad17f65fc2defaec915d16d320dbda6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9
    • Target
      $TEMP/evw_setup/1.0.0/46free/aliyun/AliyunWrapExe.exe
    • Size 107KB
    • SHA256 2cc207dd14110192c642536432166a1ec77ee4aae071d206707425b7fc969cd3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral11behavioral12
    • Target
      $TEMP/evw_setup/1.0.0/46free/aliyun/InfoForSetup.exe
    • Size 65KB
    • SHA256 b7e0bb05d2b6673dae04d3a008b516e3c2803e6d388dcae3405b94e7f7ddcf3f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral13behavioral14
    • Target
      $TEMP/evw_setup/1.0.0/46free/cacert.pem
    • Size 232KB
    • SHA256 5a03d0cf132b66659edcf43c087c4cb1b3647f341ace02dd84c693c804a0a5dd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral15behavioral16
    • Target
      $TEMP/evw_setup/1.0.0/46free/libcurl.dll
    • Size 359KB
    • SHA256 683bb7b131576fe7bc8efbd3c5b00b9ca5fd91b763774f51f4fb71a746cd896a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral17behavioral18
    • Target
      $TEMP/evw_setup/1.0.0/46free/vcruntime140.dll
    • Size 78KB
    • SHA256 44aca93d4a046252c60f0cbbe5259d9509b912aa07e5379b2cdbe842700c7e9c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral19behavioral20
    • Target
      $TEMP/evw_setup/1.0.0/46free/zlib1.dll
    • Size 84KB
    • SHA256 b4ad7ba65fededaa11befbfcbd688a1da96031c88e2324075b42e5057f04c6b8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral21behavioral22

MITRE ATT&CK Enterprise v16

Tasks