Qruncore
RJVQa11Y
YhrFH91
ZARSY62
Overview
overview
10Static
static
Document.lnk
windows7-x64
3Document.lnk
windows10-2004-x64
3maidservan...ss.dll
windows7-x64
10maidservan...ss.dll
windows10-2004-x64
10maidservan...nd.cmd
windows7-x64
1maidservan...nd.cmd
windows10-2004-x64
1maidservan...ly.bat
windows7-x64
1maidservan...ly.bat
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Document.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Document.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
maidservant/heedlessness.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
maidservant/heedlessness.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
maidservant/motherland.cmd
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
maidservant/motherland.cmd
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
maidservant/volcanically.bat
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
maidservant/volcanically.bat
Resource
win10v2004-20221111-en
Target
Document_1519.iso
Size
978KB
MD5
3813e61ca092cdbf36d948d5db48e1a8
SHA1
3fab0c00e5b7308be0f6c2222d8895378bc2d372
SHA256
68c45ecdd246af91511001d1e6cd8ba7dc28713663ba86386c942cc3af07a66a
SHA512
131b59efbca833f0acf1ddad81e201b831be21927b26bc2b33bbb5083df9884953ec974b26c7ac7fc2952eb112b2ead79bcc83f7542fbed608ae2a77aea127f6
SSDEEP
24576:NvDDsTC8SzD4CqlvwzB/HG0sA9XzjbJG6GMAR0D:NvDDsTSH4C2vwVB9Xzjt
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetStdHandle
GetCommandLineA
FindFirstFileA
FindNextFileA
CloseHandle
ConnectNamedPipe
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualAlloc
CreateNamedPipeA
CreateActCtxA
ReleaseActCtx
ActivateActCtx
DeactivateActCtx
WriteFile
GetLastError
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetStdHandle
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
MultiByteToWideChar
SetLastError
SetFilePointerEx
WriteConsoleW
HeapAlloc
HeapFree
GetModuleHandleW
GetProcAddress
InitializeCriticalSectionAndSpinCount
TlsGetValue
TlsSetValue
FreeLibrary
LoadLibraryExW
LCMapStringW
GetACP
IsValidCodePage
GetOEMCP
GetCPInfo
CreateFileW
GetStringTypeW
ExitProcess
GetModuleHandleExW
FlushFileBuffers
RtlUnwindEx
Qruncore
RJVQa11Y
YhrFH91
ZARSY62
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ