FM85.zip
- SHA256 54aa0629030dd73c87c439e09e0dda942775da54b61ffde9844ca2bd2cfb07a7
Password
PM11
Static task
static1
Behavioral task
behavioral1
Sample
VV.lnk
Resource
win7-20220901-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
VV.lnk
Resource
win10v2004-20220812-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral3
Sample
staunch/enfeebles.cmd
Resource
win7-20221111-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
staunch/enfeebles.cmd
Resource
win10v2004-20221111-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
staunch/fizzy.dll
Resource
win7-20220812-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
staunch/fizzy.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral7
Sample
staunch/registrants.cmd
Resource
win7-20221111-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
staunch/registrants.cmd
Resource
win10v2004-20221111-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target FM85.zip
- Size 335KB
- Sample221215-vs55wsfh2s
- SHA256 54aa0629030dd73c87c439e09e0dda942775da54b61ffde9844ca2bd2cfb07a7
- MD5 31a73036058b7ffae871d2ec5fb3e9f8
- SHA1 28d8a6702963b8f0c69c771ae1a46fd2d6f2a07f
- SHA512 d9f6f60bb7079e0d8f2b5f52d48f0e713e3b9b093f6f416f23176c60a9cd4a32e726297686418c4521916384832b350ad38a5eccec1fc78d5a73ed79a9b95c5f
- SSDEEP 6144:N0tXiLwNB/T34yNbFCUiZxVhiqI7vhutKMjWmtCuIras/IekiXC4I+jkVc92aojm:Kqm6QaZxbiqccKCWmtJIOs7HC4IVLaym
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
FM85.zip.zip 335KB
-
FM85.iso.iso 660KB
-
VV.lnk.lnk 1KB
-
staunch/aerate.png.png 15KB
-
staunch/enfeebles.cmd.cmd .vbs 275B
-
staunch/fizzy.sql.dll 580KB
-
staunch/registrants.cmd.cmd .vbs 203B
FM85.iso
- SHA256 b220c7a6d73c488230ff727a1523f2916674a4a56bd41f33c797668c02837145
- MD5 90e5192d1696b230ffc342d02e63332a
- SHA1 92db60463425be62846350308cd88af59fd9597d
- SHA512 4d90997747cc797057663cda58fa884941033706c7388124bda7664cf6e107f62175a0b76e2741e2d926efb07f8cd0e2bb1ecf0fb3e4dc205443ccf28439e607
- SSDEEP 12288:y1qH1vzAJ8RyddM/ZZwp7ZhOwJxfgOBtP/Wl:NboPdMzwtZhzBgOrW
- MD5 SHA1 SHA512 SSDEEP
Password
PM11
VV.lnk
- SHA256 9c6ce72957b412592a5c8d7d0324a53f2a7a77ca94773549494aecf18c83d050
- MD5 41fa8bb4ec4d94e6c329583a8d3f93b1
- SHA1 6edc2e960245eac32e23f0c085215cf757c9b247
- SHA512 da2d3cf4f056507c6b804227567a8a173f6425fe5d6663e828c4b19a6dd08c1491345c080f7f0a4d9f5315657c13c1a277df5939e5020b8b0418156c0d9db201
- MD5 SHA1 SHA512
staunch/aerate.png
- SHA256 aabd67df6c36dd10932b8b59a31c88771f82649910d9f428291c10ade46aa78f
- MD5 060266b8732519bc95b5c6ea4f41e44b
- SHA1 e591b9f5531a65a1fc7053769016f4cfe1f4e06c
- SHA512 bf7b45efb5bc3c525b652266355ea06b9d8cc5ec86c2ce1e8d15e9c3feb2ff6e15b6991b0bd95fa7a331f97a7abdb924940f446342cb42de3c3240c03084aae0
- SSDEEP 384:GP6emQKcIEwfW20hm+kAeMcxLaS9jIedditUVW9vsKEnt7O:ykG3w+20hp6d6ejYUk9vNEg
- MD5 SHA1 SHA512 SSDEEP
staunch/enfeebles.cmd
- SHA256 0e6761acc6a4da6c360730da8c1a3a03e782058c51bb95e47946f52a7524bada
- MD5 d612a00764fec9d6de3ea90f486e273b
- SHA1 bf1b3f10775eb282d1b58369a8a9f61ecadd207a
- SHA512 cc3d693bb2c91b9fa78e1f138ddafa9269df76925a0769b9e322c992557412bbfdd19a2e74a45d532cb0a5ee320d04eb082bf83cb3edc66d86a486ec1e0a300f
- MD5 SHA1 SHA512
staunch/fizzy.sql
- IMPHASH 461a59c4abc9890b10f9b02b39c02ac9
- SHA256 7ad0db9da1c28e6d12826b846ee3c82bda649e00d717cb2c4aefeaed56ea48ce
- MD5 7272aaeea39e988faaf3a5aebc6c7867
- SHA1 d3b4222a0a7a1b5271bbc0d016020c6a73850f68
- SHA512 f7bab09517e57449d9b17887d34c2420ddf1699dee9dd991650090edb14016a9416c6f2e7e6a713499721525bc6a0871206b6f18b98ca40324ca7d64860a1014
- SSDEEP 12288:oqH1vzAJ8RyddM/ZZwp7ZhOwJxfgOBtP/Wl:fboPdMzwtZhzBgOrW
- MD5 SHA1 SHA512 SSDEEP
Password
PM11
Minor OS version
Major OS version
Entry point
4131
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
WideCharToMultiByte
GetConsoleOutputCP
GetNativeSystemInfo
GetNumberOfConsoleInputEvents
GetBinaryTypeW
PrepareTape
GetNamedPipeInfo
GetCommState
GetModuleFileNameW
GetModuleHandleW
WaitForSingleObjectEx
OutputDebugStringA
LockResource
GetSystemTimeAsFileTime
GetLastError
GetMailslotInfo
InitializeCriticalSectionAndSpinCount
wininet
GetUrlCacheEntryInfoA
GetUrlCacheEntryInfoExW
shlwapi
SHRegCloseUSKey
gdi32
ScaleViewportExtEx
GetPolyFillMode
DescribePixelFormat
GetRandomRgn
PtVisible
oleaut32
SafeArrayAllocDescriptorEx
SafeArrayCreateVector
msvcrt
towupper
ungetc
memset
winmm
DefDriverProc
user32
DeferWindowPos
CountClipboardFormats
GetMenuItemCount
LoadImageW
DestroyWindow
BroadcastSystemMessageA
GetWindowRgnBox
GetDlgCtrlID
GetWindowTextA
GetRawInputDeviceInfoW
advapi32
RegOpenKeyA
LogonUserW
secur32
EnumerateSecurityPackagesW
Name
.text
Size
132KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
292KB
Virtual Size
288KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
52KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
76KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
staunch/registrants.cmd
- SHA256 61794da96a047bf99eb8ef51896e872d79d77a4760c056ff5ea9e749a263893d
- MD5 0808d161760884c2d0b2ea3443740806
- SHA1 e4e912f338346d0cfca67d2d3a5e03e6c0c0aecd
- SHA512 c9ad37c261d985da83b7ff9ae6a132586b7b4e23a81df868f434072efcf4af7721f764976d1f358ee12a6ae1abdbeb507d3541c21d9220fe406fa78a7c9476b2
- MD5 SHA1 SHA512