General

  • Target
    https://waveexecutor.com/download-wave/
  • Sample260808-ahh76aaf59

Malware Config

Targets

    • Target
      https://waveexecutor.com/download-wave/
    • Executes dropped EXE

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Network Share Discovery

      Attempt to gather information on host network.

    • Discovers running processes

      Running process information can be used to identify security tools or plan follow-on actions.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks