General

  • Target
    https://cdn.discordapp.com/attachments/1515123331156676718/1535478508741206167/wave-crack-release.rar?ex=6a77e94c&is=6a7697cc&hm=cbaa2db80f1f2d37f618b143d7de73df7d2f90c026d20110614e19775f654829&
  • Sample260808-eg1s2azcph

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1515123331156676718/1535478508741206167/wave-crack-release.rar?ex=6a77e94c&is=6a7697cc&hm=cbaa2db80f1f2d37f618b143d7de73df7d2f90c026d20110614e19775f654829&
    • Executes dropped EXE

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Network Share Discovery

      Attempt to gather information on host network.

    • Discovers running processes

      Running process information can be used to identify security tools or plan follow-on actions.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks