General
- Target WaveCrack.exe
- Size 38.8MB
- Sample260830-3qgnhsbl51
- SHA256 e42492c152221d14f0f32e23d46adc96437a1033c1ac8fbecc708ae330e31796
- MD5 64e249e5a052bc7517f28d7c391c4b0d
- SHA1 796b54b4466e42162b77238843f9a6edad43e54d
- SHA512 dc11e46c7a1560bb3efb913560bc49c28658490fc1f6db36173f86bf1c1ce836482a9d7d6d763fffc80c3fcc24093b87ee06af8ed92e2082a0e44162e324d0e3
- SSDEEP 786432:HbS4ce2s7EIiZHlBZbURphhXahpHJXduJT+I10Mk7mCEHO4jWgodhvXr5WBwa:O4f/WH/hUPhhXahkv0x7mLnodh5WBwa
- TLSH T13497331C752061BBECE0413A5EABC8B6E362B9524795D2EF23EC13351DBF1A05E38B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
WaveCrack.exe
Resource
win11-20260513-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target WaveCrack.exe
- Size 38.8MB
- SHA256 e42492c152221d14f0f32e23d46adc96437a1033c1ac8fbecc708ae330e31796
- MD5 64e249e5a052bc7517f28d7c391c4b0d
- SHA1 796b54b4466e42162b77238843f9a6edad43e54d
- SHA512 dc11e46c7a1560bb3efb913560bc49c28658490fc1f6db36173f86bf1c1ce836482a9d7d6d763fffc80c3fcc24093b87ee06af8ed92e2082a0e44162e324d0e3
- SSDEEP 786432:HbS4ce2s7EIiZHlBZbURphhXahpHJXduJT+I10Mk7mCEHO4jWgodhvXr5WBwa:O4f/WH/hUPhhXahkv0x7mLnodh5WBwa
- TLSH T13497331C752061BBECE0413A5EABC8B6E362B9524795D2EF23EC13351DBF1A05E38B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1