Analysis
- user interaction
yes - max time kernel
42s - max time network
21s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/09/2026, 12:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
wave spoofer/Wave Spoofer CRACKED.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
wave spoofer/Wave Spoofer CRACKED.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target wave spoofer/Wave Spoofer CRACKED.exe
- Size 18.4MB
- Sample260928-pag3fsshqf
- SHA256 fc4713f4dcc5658899c9eb2b2e492d3837f56e1154f13f7dfb5b2ff89857fe71
- MD5 6c38f385e687ce2782a0639369a74357
- SHA1 c78859c608afb7981fd56f92fb2958a57b4456f2
- SHA512 2e0ba9d14a8d23dc36513dd4196dcb9e426c9ca83bda9bc6a2372e60788d2db2df51ad7837c7e39658f7099b2daa888e9192ebc2347a662202761b349263fad2
- SSDEEP 393216:W+tpnNCw+bX32N6FPuLBvXPgov7FDCBIsHplHWmvYZnN:vrT6Fyp1v+IsHp1vWN
- TLSH T18B17C031B3C6CA76E89F02B1897EFB5A923D7A690724D1CF5194E99C18313D21E313A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 64 IoCs
pid Process 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Wave Spoofer CRACKED.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe 1192 Wave Spoofer CRACKED.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1192 Wave Spoofer CRACKED.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\wave spoofer\Wave Spoofer CRACKED.exe"C:\Users\Admin\AppData\Local\Temp\wave spoofer\Wave Spoofer CRACKED.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1192