a1401282720e2bcf58d210ced780b60017b1c02ac4b45ce8bb12e781154c2185
- SHA256 a1401282720e2bcf58d210ced780b60017b1c02ac4b45ce8bb12e781154c2185
Overview
overview
3Static
static
3WCE-完整...rp.dll
windows10-2004-x64
1WCE-完整...rp.dll
windows11-ltsc_2024-x64
1WCE-完整...ar.dll
windows10-2004-x64
1WCE-完整...ar.dll
windows11-ltsc_2024-x64
1WCE-完整...nel.py
ubuntu-18.04-amd64
1WCE-完整...nel.py
debian-9-armhf
1WCE-完整...nel.py
debian-9-mips
1WCE-完整...nel.py
debian-9-mipsel
1WCE-完整...��.cmd
windows10-2004-x64
3WCE-完整...��.cmd
windows11-ltsc_2024-x64
3WCE-完整...��.cmd
windows10-2004-x64
3WCE-完整...��.cmd
windows11-ltsc_2024-x64
3WCE-完整...��.cmd
windows10-2004-x64
3WCE-完整...��.cmd
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WCE-完整版/Assembly-CSharp.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
WCE-完整版/Assembly-CSharp.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
WCE-完整版/WcePillar.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
WCE-完整版/WcePillar.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
WCE-完整版/wce_panel/wce_panel.py
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
WCE-完整版/wce_panel/wce_panel.py
Resource
debian9-armhf-20260513-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
WCE-完整版/wce_panel/wce_panel.py
Resource
debian9-mipsbe-20260513-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
WCE-完整版/wce_panel/wce_panel.py
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
WCE-完整版/wce_panel/打开面板.cmd
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
WCE-完整版/wce_panel/打开面板.cmd
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral11
Sample
WCE-完整版/安装.cmd
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
WCE-完整版/安装.cmd
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral13
Sample
WCE-完整版/还原.cmd
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
WCE-完整版/还原.cmd
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target a1401282720e2bcf58d210ced780b60017b1c02ac4b45ce8bb12e781154c2185
- Size 458KB
- Sample261101-2g7mxayves
- SHA256 a1401282720e2bcf58d210ced780b60017b1c02ac4b45ce8bb12e781154c2185
- MD5 3a113d3e97fbbea4f840f71da3d1208d
- SHA1 e86090519da71e5c524c7f5fe398aa0e81e55132
- SHA512 1149b34ca0873b06c78ce7e6d39a2b20dcdcbd3f216bf9b512e042a6a0b863eb8e74da2a780c98ebe5e10237cb21a9847ceeacd6015b331b3e5edc18947c78a4
- SSDEEP 12288:SRf90jI7OK/a8tZxdtYB3KIpf0LVcTD/vQKcBFt3mpuA:2M2OnEbt+3WLWTD/vQKcBFto
- TLSH T101A423B750406E82F429B5B29CA2034A5DC971DAC3F7162A23DDB549394E30F2BF17AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/WCE-完整版/Assembly-CSharp.dll unpack001/WCE-完整版/WcePillar.dll
File Explorer
-
a1401282720e2bcf58d210ced780b60017b1c02ac4b45ce8bb12e781154c2185.zip 458KB
-
WCE-完整版/Assembly-CSharp.dll.dll 1.1MB
-
WCE-完整版/WcePillar.dll.dll 21KB
-
WCE-完整版/config/wce_chalk.txt1B
-
WCE-完整版/config/wce_cmd.txt1B
-
WCE-完整版/config/wce_instant.txt1B
-
WCE-完整版/config/wce_names.txt1B
-
WCE-完整版/config/wce_noclip.txt1B
-
WCE-完整版/config/wce_pillar_id.txt4B
-
WCE-完整版/config/wce_pillar_y.txt3B
-
WCE-完整版/config/wce_speed.txt4B
-
WCE-完整版/config/wce_teacher.txt1B
-
WCE-完整版/config/wce_trick.txt5B
-
WCE-完整版/wce_panel/wce_panel.py.py .sh 40KB
-
WCE-完整版/wce_panel/打开面板.cmd74B
-
WCE-完整版/安装.cmd.cmd .bat 1KB
-
WCE-完整版/说明.txt1KB
-
WCE-完整版/还原.cmd.cmd .bat 957B
WCE-完整版/Assembly-CSharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b22ff115519e0dcee0ca8c25fa1d023f4a5dea53b6c323244c62152336887d74
- MD5 e71a152f3bf13da1cf9dd569bb33ad23
- SHA1 a0497e9738b129251fbcf59e79160f92255c8447
- SHA512 55ddadddc79026f11999028ca533fb487f56c49aab8045d79558febd547bff7a9993cd2691ac5f273057802d50dcf76cd66f08edc9ffaec1a6cc95e51d8f022a
- SSDEEP 24576:KdJ7WiWVJNogbKVd++qYmRv67fED4EI9VL90Yqx:iWVJNRbKVdHqjTsV2
- TLSH T16A456BA63BD88E37D59F0B7BB0254945ABF1D08193C3EB5EEA44E1BC5C827A54D08393
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1195646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
704B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
WCE-完整版/WcePillar.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1100064137159070adfc2cfc89fe5a9950de4d75aa3d37fd1d06cbaca825a649
- MD5 54cf504e6446f694cc1134c3ee65e86a
- SHA1 e796bc7fc3a09759cddb714b00930f34f01a358e
- SHA512 77f5ec6eded95359e31b02c9bc4aa96e4be012a79546a64f41afa6decd5b9f598cebd8eb7dfc5096599e211b61c6574fa1fea8835af32feb2c26e636d28a4cb7
- SSDEEP 384:O1Jth+u5slCLM3Pg/7li+zHQIeSuxTNJH/u33ccOJz6:a15U2/7li+7QkI1/acct
- TLSH T1DFA2C75837ECCA15E5FE1BB79D7292026334FA974D53C34E0EE490AD2A733844E54BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
27582
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
696B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
WCE-完整版/config/wce_chalk.txt
- SHA256 5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
- MD5 cfcd208495d565ef66e7dff9f98764da
- SHA1 b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
- SHA512 31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99
- MD5 SHA1 SHA512
WCE-完整版/config/wce_cmd.txt
- SHA256 5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
- MD5 cfcd208495d565ef66e7dff9f98764da
- SHA1 b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
- SHA512 31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99
- MD5 SHA1 SHA512
WCE-完整版/config/wce_instant.txt
- SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- MD5 c4ca4238a0b923820dcc509a6f75849b
- SHA1 356a192b7913b04c54574d18c28d46e6395428ab
- SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
- MD5 SHA1 SHA512
WCE-完整版/config/wce_names.txt
- SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- MD5 c4ca4238a0b923820dcc509a6f75849b
- SHA1 356a192b7913b04c54574d18c28d46e6395428ab
- SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
- MD5 SHA1 SHA512
WCE-完整版/config/wce_noclip.txt
- SHA256 5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
- MD5 cfcd208495d565ef66e7dff9f98764da
- SHA1 b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
- SHA512 31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99
- MD5 SHA1 SHA512
WCE-完整版/config/wce_pillar_id.txt
- SHA256 43871a4ea259ce408e919860279fa4f7af23f0000303064f8e692fb6317ca397
- MD5 3ce83f544dbe69bb4fb19211fc442c2f
- SHA1 55c5b25d10f91c2f98b80ef2ebd4b7038a87946c
- SHA512 9b18ce277d7d9ec3cdd7fde0f740a8fdb81979330b61d35a89165aabfe26ceb0a36163c4519d49872423dc4e1eb5c57c3ca38908fbb4da728accbf78bbe49183
- MD5 SHA1 SHA512
WCE-完整版/config/wce_pillar_y.txt
- SHA256 d2cbad71ff333de67d07ec676e352ab7f38248eb69c942950157220607c55e84
- MD5 d310cb367d993fb6fb584b198a2fd72c
- SHA1 1b390cd54a0c0d4f27fa7adf23e3c45536e9f37c
- SHA512 adb7585493dae6ec351ac02877c2fe4c3f61240dd677a9b91a64ddf931c1b6b01e2a779eba2dd9e96b9d72e13af81a35b64c70390e5ac3d255697bd5037f1531
- MD5 SHA1 SHA512
WCE-完整版/config/wce_speed.txt
- SHA256 cf9dcf6da8a82be1335c398a4005def7ee3a53d4698c59dbc6b2b14e72d1263c
- MD5 41cf2677cc4ec9356dad8e76dfb87448
- SHA1 d216d67241703501bb8883944021f5a8643f24ac
- SHA512 20bf0b311a2692690bdec9d261011e410245cd490dab1faf67a606b60496980d8af1bcacdaff1ff108bc8bddf2b3208013aeb04268b1d073d41eaeaf519330b6
- MD5 SHA1 SHA512
WCE-完整版/config/wce_teacher.txt
- SHA256 5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
- MD5 cfcd208495d565ef66e7dff9f98764da
- SHA1 b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
- SHA512 31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99
- MD5 SHA1 SHA512
WCE-完整版/config/wce_trick.txt
- SHA256 0856fec27d2349c2b70d721c51306b36a429ee03a77f294fc96223226c0c9b5f
- MD5 40d67f1f684ad599cf34e9906e022769
- SHA1 c266b716546b9df07b2fc37be643fc682192629f
- SHA512 6117bcc0c0f8d589f0f801b7ff99d57cd6c315df6640d4c68a1b8fd8ffe2907a89301ceea779bfd575d396352dac2d3b8d199921bdb0e4849bade885ceb9e2dc
- MD5 SHA1 SHA512
WCE-完整版/wce_panel/wce_panel.py
- SHA256 79dbcf92ee75f099bd466592c8f1d581f9e727b4504cadadf2dcff50e234b339
- MD5 0ade7c0a5f1d937090440035d3035ab2
- SHA1 c0a0b8a2bbd6bb430a3b37fd315a857fc5a9a927
- SHA512 75f07741500eea938a2f4a1566337c4f0e18ad83b63c8c7ded307e28fae129b0f177602a3cb63714d3ed2ac1e154d07e19d2f38a4800c5898bb5c23a410ab250
- SSDEEP 384:dGDr0ea3AL1NkZz5y/f/P/R/BP7h1JBskxTUvus4D1SnNuxXeZiz08f23FvdtLWf:sDrw3g3P7PUvuh1Snu5OvP+6HiB
- TLSH T11B13B627DC9948359273CC1E6527F8A7F60E0B53492E9A03B8BC52641F7D17281F8DEA
- MD5 SHA1 SHA512 SSDEEP TLSH
WCE-完整版/wce_panel/打开面板.cmd
- SHA256 5041c80548966336ef457f9d1bf435a287c18a7776fa92e7685b09e6650375f7
- MD5 74e6f7d6cde3aa5e48f41821cf4b05a7
- SHA1 137471b258644fa8f43d4a1dc16ef07ac2804650
- SHA512 7c46d99f57425477b79cb0a5e9902f480dace55b3c065f001a4e43f21de0ebc7de3ffd4fc3f787ecfaaa63770f5f35e9f98cf51d0d66b586a75cb4fc866dfe83
- TLSH T15CA02451341150007450040030353F44F40511C7FC01D5CD304734144D4F543F14D0D0
- MD5 SHA1 SHA512 TLSH
WCE-完整版/安装.cmd
- SHA256 8edf4be87b7493e721b8d31d829fa9a39beb1f4fe23f6482cee0b020fd7410d8
- MD5 2b7438fdd6003b4e6a4768d4464ea0fa
- SHA1 89bc79229a67b0f1476a4980dacd3faca173d646
- SHA512 0e84d369533192d99306b159d4a22506295d6055d86302e2ec9b42099be1b7128d1f3956ff07bc8f42b317f3b5c11c6964d3d9519e7c4391df0e580f9a486917
- TLSH T11231252F295C01AF79B51FD17974189AFB8F365741712B8430311873978B7C91E9728D
- MD5 SHA1 SHA512 TLSH
WCE-完整版/说明.txt
- SHA256 c9e8f2556c3d3632efa6401bddb7ec175b1b990ea979731a94dd522d79a5e71c
- MD5 e81d9c5e01ad61cf8dabef08e7354a6a
- SHA1 db417983842a47b4b29335839c866b0bc1ba53c6
- SHA512 d7837a694085c4087aa29ca59d17ed30ae09082def49df18043487c97915f4c22392e812f1194975b85a6255673c91ad768670f62857d5663910643f73cbb744
- TLSH T1D831C3780384AB6E00F3D2CA990D042C3EE2AE87FBB8CE47BE5DE44203D5949005663A
- MD5 SHA1 SHA512 TLSH
WCE-完整版/还原.cmd
- SHA256 39e2d47620d759f4b4cf621ed11562ee136971e12fa82a509e6cd46fbeffc760
- MD5 b0ef7e39316d17c1799f9bd44b300761
- SHA1 0e5fc76d3dc8e748fa80f9c87fe708909ea9c4ab
- SHA512 26f4a10f8d5b5f89dc2cec9906b76a09cde2bbcd99caf3fb1834ddf0c60b5caf4ed5dd3161d226a387b49cb46fc3a44f2fdac48fdafebb647365d608e1589299
- TLSH T1A311046F2A0C02AF79F26F6339A91465FB8F22EB43113B4534311870678E7C90FD6248
- MD5 SHA1 SHA512 TLSH