Overview
overview
10Static
static
d/wdsqny.exe
windows7-x64
10d/wdsqny.exe
windows10-2004-x64
10e/bhux.exe
windows7-x64
10e/bhux.exe
windows10-2004-x64
10f/diij.exe
windows7-x64
10f/diij.exe
windows10-2004-x64
10idhb.exe
windows7-x64
10idhb.exe
windows10-2004-x64
10sspa.exe
windows7-x64
10sspa.exe
windows10-2004-x64
10Static task
static1
Behavioral task
behavioral1
Sample
d/wdsqny.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d/wdsqny.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
e/bhux.exe
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
e/bhux.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
f/diij.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
f/diij.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
idhb.exe
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
idhb.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
sspa.exe
Resource
win7-20220812-en
General
-
Target
84186db5226ec1320a9205b1f4f69afa906552692c72c375d4efff1bc1b2758c
-
Size
484KB
-
MD5
a351b8d6f631b42048cac371899044ea
-
SHA1
9280e27e5e4388ee48bf9507bbbe80d05f10afae
-
SHA256
84186db5226ec1320a9205b1f4f69afa906552692c72c375d4efff1bc1b2758c
-
SHA512
238e1b89e0ff3639ccc84941c619e34ea03b946be537377cae593fbad8881c326ab0870b405c2cc781071d5d5502951b5c8e81d9ad292d15f86aacbe9f0e8c69
-
SSDEEP
12288:NhTSq429gODNCT++QbhTSq429gOUhTSq429gOwhTSq429gOe:Nh+q429gOBYih+q429gOUh+q429gOwho
Malware Config
Signatures
Files
-
84186db5226ec1320a9205b1f4f69afa906552692c72c375d4efff1bc1b2758c.rar
-
autorun.inf
-
d/autorun.inf
-
d/wdsqny.pif.exe windows x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
e/autorun.inf
-
e/bhux.exe.exe windows x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
f/autorun.inf
-
f/diij.pif.exe windows x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
idhb.exe.exe windows x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
sspa.exe.exe windows x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE