General
- Target rust.wav.exe
- Size 31.1MB
- Sample260806-mpyyeahq7z
- SHA256 857c54b441b19e70674f421bbf8cea4873427d48f6c903c68bdaf864ecc00951
- MD5 2e6b4de5e952ca664361bb114e0ddfb0
- SHA1 af7d1b2ab63b307fc51a8ee6fde3bc2da0a13726
- SHA512 ac06f6496058b1c2da47d94146ef83f6dfe9d6dfbf5dcc30bfdedd3c9fc2b76b1b7a34df38528bf73163ef540651a307691e3593a6a76f5195898757a648d519
- SSDEEP 786432:Hi0es6X/9F2ekmaBJDnirIEuK6GqP535opC:K9F2LBJDir9IO
- TLSH T1FF67E015EDF075D4D409B23A59CD18069DA31EC39E40AD8F77CDAC8A1F22B994DEB283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
rust.wav.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
rust.wav.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target rust.wav.exe
- Size 31.1MB
- SHA256 857c54b441b19e70674f421bbf8cea4873427d48f6c903c68bdaf864ecc00951
- MD5 2e6b4de5e952ca664361bb114e0ddfb0
- SHA1 af7d1b2ab63b307fc51a8ee6fde3bc2da0a13726
- SHA512 ac06f6496058b1c2da47d94146ef83f6dfe9d6dfbf5dcc30bfdedd3c9fc2b76b1b7a34df38528bf73163ef540651a307691e3593a6a76f5195898757a648d519
- SSDEEP 786432:Hi0es6X/9F2ekmaBJDnirIEuK6GqP535opC:K9F2LBJDir9IO
- TLSH T1FF67E015EDF075D4D409B23A59CD18069DA31EC39E40AD8F77CDAC8A1F22B994DEB283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1