erbium | Fatality[.]rar

General

Target
Fatality.rar
Size 9.7MB
Sample240716-2xx4eaxcmf
SHA256 70079fcafbf9ec172a79b0014e8734e13244d6ca0a9be83e6d4648059f89d32c
MD5 301e75c8a04c853850e53cd2cbb45ff4
SHA1 fefb10adb1c7e0fbbb244cc204aa6161941c3b38
SHA512 554d2898f7cb304d903f22ba8158db361dedcd7e75e60567eb6f10f172f198c1fb57be4c7af953aec6af9f15bf4278dd8367fee6f21e45694f92614a295f162d
SSDEEP 196608:Ed0uiGyXxVjlQrfq+NBO+WHzJaIrfRMPZdpY0f+7ZuCddb3nxy2Ejoei5fhYmHuh:cBE1GfrNWHzJaIrfRMBrY0fOACv3xJEv
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

erbium

Malware Config

Signatures

Erbium family
erbium

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Fatality.dll

File Explorer

Fatality.rar

.rar 9.7MB
Fatality.dll

.dll 36.1MB

Fatality.rar

SHA256 70079fcafbf9ec172a79b0014e8734e13244d6ca0a9be83e6d4648059f89d32c
MD5 301e75c8a04c853850e53cd2cbb45ff4
SHA1 fefb10adb1c7e0fbbb244cc204aa6161941c3b38
SHA512 554d2898f7cb304d903f22ba8158db361dedcd7e75e60567eb6f10f172f198c1fb57be4c7af953aec6af9f15bf4278dd8367fee6f21e45694f92614a295f162d
SSDEEP 196608:Ed0uiGyXxVjlQrfq+NBO+WHzJaIrfRMPZdpY0f+7ZuCddb3nxy2Ejoei5fhYmHuh:cBE1GfrNWHzJaIrfRMBrY0fOACv3xJEv
MD5 SHA1 SHA512 SSDEEP

Fatality.dll

IMPHASH a1e09d5ba7dd62b3319c960d9e083821
SHA256 ed6566cd8828d0d9a7bd2bd7731df7703977d9b18fa7ede31bb8b1835b12da78
MD5 38bf550f8d73ea9791d7778d9b6b44a8
SHA1 67bf70a4d78f9f18b1af30cd9c85c632b52188c1
SHA512 cfff6d55b90a42be22d09aaf30eed718b71fff8bfddab2404e968359a18ab8aec679a4ca85e144d3527602fd515a03724e897addd68865e796b0a387f582fd7f
SSDEEP 393216:g4S82OrtN+zJkGsF20dH5ZXtpKjzw1QxgvLqmNAmjpy:7OOrtN+zJkGsF2OZZXuv4GcLjp
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4205182

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\useless&&\proj new\fatality recrack fix\Release\fagality.pdb

kernel32

SizeofResource VirtualProtect VirtualAlloc FindResourceA GetModuleHandleA AttachConsole LoadLibraryA LockResource CreateThread LoadResource GetProcAddress GetCurrentProcessId GetConsoleWindow AllocConsole VirtualQuery VirtualFree HeapCreate HeapFree GetCurrentProcess Thread32Next Thread32First GetCurrentThreadId SuspendThread ResumeThread CreateToolhelp32Snapshot Sleep HeapReAlloc CloseHandle HeapAlloc GetThreadContext GetModuleHandleW FlushInstructionCache SetThreadContext OpenThread WriteConsoleW SetEndOfFile ReadConsoleW ReadFile HeapSize CreateFileW SetFilePointerEx GetFileSizeEx SetStdHandle GetConsoleMode GetConsoleOutputCP WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar GetStringTypeW GetCPInfo SetLastError FreeLibrary InitializeCriticalSectionAndSpinCount SetEvent ResetEvent WaitForSingleObjectEx CreateEventW IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException InterlockedFlushSList GetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW LCMapStringW GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap FlushFileBuffers WriteFile

user32

SetWindowLongA SetWindowPos GetWindowLongA

shell32

ShellExecuteA

ws2_32

connect send recv

Resubmissions

Sharing