Static task
static1
Behavioral task
behavioral1
Sample
Desktop.rar
Resource
win7-20230220-es
Behavioral task
behavioral2
Sample
Desktop.rar
Resource
win10v2004-20230220-es
Behavioral task
behavioral3
Sample
WSKENXR.exe
Resource
win7-20230220-es
Behavioral task
behavioral4
Sample
WSKENXR.exe
Resource
win10v2004-20230220-es
Behavioral task
behavioral5
Sample
hpc.exe
Resource
win7-20230220-es
Behavioral task
behavioral6
Sample
hpc.exe
Resource
win10v2004-20230220-es
General
-
Target
Desktop.rar
-
Size
7.3MB
-
MD5
92cedb432e4647fe32fe243646b8981d
-
SHA1
45b4963391bb34a306e083fd78bdc4d1c7b21790
-
SHA256
b8e436e991881777dd9c383db3a4ab8850555a18898a890f5cad38a726f3d239
-
SHA512
25197f39618e343a2c04a9b35f5cd3ebfc951ef1ba29a964126bf5a5b7d9c677c817acca40e472042c78628f601af48e12c2e6998453d9a026d0a048736f6023
-
SSDEEP
196608:2R34ZIR34ZWeE+QMzuBKPw8NRziMTU1vE1yE9BbdJWmEoAWVSmw8u:/55E+Q7BKPw8N1iMTUBE1yQJWmEoA3mK
Malware Config
Signatures
Files
-
Desktop.rar.rar
-
WSKENXR.exe.exe windows x64
d11d5ddbd18f407d160bd7657d0d7147
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
ShellAboutW
mscoree
_CorExeMain
advapi32
RegisterEventSourceW
user32
WaitMessage
kernel32
GetModuleHandleA
Sections
.text Size: - Virtual size: 873KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 248KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
hpc.exe.exe windows x64
d11d5ddbd18f407d160bd7657d0d7147
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
ShellAboutW
mscoree
_CorExeMain
advapi32
RegisterEventSourceW
user32
WaitMessage
kernel32
GetModuleHandleA
Sections
.text Size: - Virtual size: 873KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 248KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE