General

  • Target
    Wave.zip
  • Size 26.9MB
  • Sample260808-1yta6sfe93
  • SHA256 ac57f609e56f7344803951e35e37df8ecffba52291e9593bb1616be57cc092e5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Wave.exe
    • Size 9.6MB
    • SHA256 fdddc5f2d005696b1923e8192a0f66b599dbf92aff40447869f2c278a736c50c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Checks whether UAC is enabled

    • Network Share Discovery

      Attempt to gather information on host network.

    • Discovers running processes

      Running process information can be used to identify security tools or plan follow-on actions.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      WaveUIAuth.dll
    • Size 20.6MB
    • SHA256 2f0941e4c4714d207f866861555e1606fd54e12b865b9f4d3d50ceb9f78fd403
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      WebView2Loader.dll
    • Size 156KB
    • SHA256 4cd3ffd5f52122432b6537b360c2317f96650928c927bb3caa59d5807da573a9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks