General
- Target TitleWave.exe
- Size 7.7MB
- Sample260912-qvyrdacf25
- SHA256 5afd5241307c34b1990b2286ba49d351d622744b2d88e37a07ff2a46a9b50809
- MD5 64256735aea5338b5ff625c3ee39dcc5
- SHA1 9c7c56ec15e46c24d8224d66fb4548c82dd72804
- SHA512 b769425eb9e066feba1a45af63ed08d60fe35ab583f0e57a226d443fbda8982a96bfb28a912971315974882bf572f6e2c9e0c74f1265add8eb25674934124be5
- SSDEEP 196608:VZc980Jn+TwztFAdkCySYi313qCfOfssLhoFSTbJlA/f0UFLtE:7cGyn/F41ySPpqCLEhoYfEH
- TLSH T1748623BE615C3268C41EC83458337D98F1B6953E45E996AEB6CB7B807B5F810DE03B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
TitleWave.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target TitleWave.exe
- Size 7.7MB
- SHA256 5afd5241307c34b1990b2286ba49d351d622744b2d88e37a07ff2a46a9b50809
- MD5 64256735aea5338b5ff625c3ee39dcc5
- SHA1 9c7c56ec15e46c24d8224d66fb4548c82dd72804
- SHA512 b769425eb9e066feba1a45af63ed08d60fe35ab583f0e57a226d443fbda8982a96bfb28a912971315974882bf572f6e2c9e0c74f1265add8eb25674934124be5
- SSDEEP 196608:VZc980Jn+TwztFAdkCySYi313qCfOfssLhoFSTbJlA/f0UFLtE:7cGyn/F41ySPpqCLEhoYfEH
- TLSH T1748623BE615C3268C41EC83458337D98F1B6953E45E996AEB6CB7B807B5F810DE03B42
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger