Qruncore
RJVQa11Y
YhrFH91
ZARSY62
Static task
static1
Behavioral task
behavioral1
Sample
Offer.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Offer.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
notrobassfir/colonelclothes.bat
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
notrobassfir/colonelclothes.bat
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
notrobassfir/imposing.dll
Resource
win7-20220812-en
Target
Downloads.7z
Size
673KB
MD5
321261cdb579752d3e59d8ec16273206
SHA1
f7a565a408528fd99bfe2a5e2103bbc9acac4d6b
SHA256
99482cc76a3f020bbca4609e4b4d39e3577543443898941b916079dc9b738fb3
SHA512
97c474061b8e294414b5fbaf559ed11a1ab4aaec14535352917591fe3990c4a46411314198bc8b439f32e31c831df7c784d1b609d3882a15f5504c7ed1ae1757
SSDEEP
12288:0yxSVJqWure1KutRi2HpTNKoupkPc6Kw1HtltDETmMIMn/BGFAQyAbt2:0vVEWuYu2H90pkrxDRRMF/BGa1AQ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetStdHandle
GetCommandLineA
FindFirstFileA
FindNextFileA
CloseHandle
ConnectNamedPipe
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualAlloc
CreateNamedPipeA
CreateActCtxA
ReleaseActCtx
ActivateActCtx
DeactivateActCtx
WriteFile
GetLastError
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetStdHandle
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
MultiByteToWideChar
SetLastError
SetFilePointerEx
WriteConsoleW
HeapAlloc
HeapFree
GetModuleHandleW
GetProcAddress
InitializeCriticalSectionAndSpinCount
TlsGetValue
TlsSetValue
FreeLibrary
LoadLibraryExW
LCMapStringW
GetACP
IsValidCodePage
GetOEMCP
GetCPInfo
CreateFileW
GetStringTypeW
ExitProcess
GetModuleHandleExW
FlushFileBuffers
RtlUnwindEx
Qruncore
RJVQa11Y
YhrFH91
ZARSY62
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ