DllRegisterServer
KXI
MHx229
Tin22PP
Vaevy8305
Overview
overview
10Static
static
Claim_Copy.lnk
windows7-x64
3Claim_Copy.lnk
windows10-2004-x64
3fathomed/p...ce.cmd
windows7-x64
1fathomed/p...ce.cmd
windows10-2004-x64
1fathomed/p...te.dll
windows7-x64
10fathomed/p...te.dll
windows10-2004-x64
10fathomed/r...ted.js
windows7-x64
3fathomed/r...ted.js
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Claim_Copy.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Claim_Copy.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
fathomed/parsimoniouslySolstice.cmd
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
fathomed/parsimoniouslySolstice.cmd
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
fathomed/pontificate.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
fathomed/pontificate.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
fathomed/retchObliterated.js
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
fathomed/retchObliterated.js
Resource
win10v2004-20220812-en
Target
Claim_Copy_1217_Sep_20.zip
Size
391KB
MD5
1363a8201d3cc9acada1749fcca359fe
SHA1
22b26525edbaf2f98e87c5a27c1fcfe8c1edc61e
SHA256
b5ac657c871c4c761fb2dc40b312b0a9951bf0eb3f3790c9cf22f15bc69d0019
SHA512
bb885d4046c626963d09256126484326f200f20b9ffcc00d7d3a0453adcb859d4fed5774804d113b1dcd1f90796ffedaea948dccbc44557e3e60054505c33677
SSDEEP
12288:GbfYjU+2ZqQ+POUDvKAI1MwJKn7C4mFW0GAyO:YYjU+rp9Dv0CkKJmUQ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetStdHandle
GetCurrentDirectoryA
CreateFileA
SetFilePointer
CloseHandle
GetLastError
PeekNamedPipe
HeapAlloc
HeapFree
GetProcessHeap
WaitForSingleObject
ExitProcess
CreateThread
GetCurrentThreadId
GetSystemDirectoryA
VirtualAlloc
GetProcAddress
LoadLibraryA
CreateNamedPipeA
GetCurrentActCtx
DllRegisterServer
KXI
MHx229
Tin22PP
Vaevy8305
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ