Static task
static1
Behavioral task
behavioral1
Sample
Desktop.rar
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Desktop.rar
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
WSKENXR.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
WSKENXR.exe
Resource
win10v2004-20230221-en
Behavioral task
behavioral5
Sample
hpc.exe
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
hpc.exe
Resource
win10v2004-20230220-en
General
-
Target
Desktop.zip
-
Size
7.9MB
-
MD5
a67dd1fd2e6766a5cf2df9f22fefb70f
-
SHA1
7b22c60a393a487be8cb690426528bc8c9ed16c9
-
SHA256
8e5caecea47361361a7d9db02ec614e16884a7dd4c6ebfa029df390ab31eafd2
-
SHA512
7d0b68fab411f812263d1aa3982a5e893fb175e341c06e8b79150e9b25a7d46ce1c6551b14997af249cc6085f54cbc4ef67301390d3d7afc977e9a6ad230a968
-
SSDEEP
196608:2R34ZIR34ZWeE+QMzuBKPw8NRziMTU1vE1yE9BbdJWmEoAWVSmw8dSn:/55E+Q7BKPw8N1iMTUBE1yQJWmEoA3mI
Malware Config
Signatures
Files
-
Desktop.zip.rar
-
WSKENXR.exe.exe windows x64
d11d5ddbd18f407d160bd7657d0d7147
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
ShellAboutW
mscoree
_CorExeMain
advapi32
RegisterEventSourceW
user32
WaitMessage
kernel32
GetModuleHandleA
Sections
.text Size: - Virtual size: 873KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 248KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
hpc.exe.exe windows x64
d11d5ddbd18f407d160bd7657d0d7147
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
ShellAboutW
mscoree
_CorExeMain
advapi32
RegisterEventSourceW
user32
WaitMessage
kernel32
GetModuleHandleA
Sections
.text Size: - Virtual size: 873KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 248KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE