General
- Target TitleWave.exe
- Size 7.8MB
- Sample261102-prj85stwat
- SHA256 742b2b2b072791cf0d378d604c061be54c5df0215d21936142e71d3a949ea5f7
- MD5 879cd6c42d96c7731ebc953908ae7734
- SHA1 e12b51cfeef7d50624a307386f9f2f0d75c0320c
- SHA512 700bd14a5c381ba68e8f403c0493aac8e7d073efaaceb1d8c8ddb38ecba0a956592be1da6f33d7c56bb074f056b41dcb7e234085676e6f179d43db4b9a0c99d1
- SSDEEP 196608:iTIMYa6JFTeqGoWVdCWxBDUUqk9Ld5p5sSvUBP3cHmQIq3zGtE:Bba6JF+lV8WbDUUqip5sOIoC
- TLSH T1398623AE604D339DC46AC1709433FD47F2B5112E4BDA59EEB2C77BC437EA0109A06B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
TitleWave.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
TitleWave.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target TitleWave.exe
- Size 7.8MB
- SHA256 742b2b2b072791cf0d378d604c061be54c5df0215d21936142e71d3a949ea5f7
- MD5 879cd6c42d96c7731ebc953908ae7734
- SHA1 e12b51cfeef7d50624a307386f9f2f0d75c0320c
- SHA512 700bd14a5c381ba68e8f403c0493aac8e7d073efaaceb1d8c8ddb38ecba0a956592be1da6f33d7c56bb074f056b41dcb7e234085676e6f179d43db4b9a0c99d1
- SSDEEP 196608:iTIMYa6JFTeqGoWVdCWxBDUUqk9Ld5p5sSvUBP3cHmQIq3zGtE:Bba6JF+lV8WbDUUqip5sOIoC
- TLSH T1398623AE604D339DC46AC1709433FD47F2B5112E4BDA59EEB2C77BC437EA0109A06B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger