Resubmissions

04/09/2023, 13:14

230904-qgxbdsgf84 3

General

  • Target

    Krnl.zip

  • Size

    108.5MB

  • MD5

    0b2c43f6cd4dc5fd657ff6b880b7d411

  • SHA1

    96d8dcd7ae1d53ab19e6f0cb87fca55bf7bcc1e4

  • SHA256

    9e09f5b91f378edfd3d8e7b5ff83e45a57abb3ecf2288803663a08548a872fdb

  • SHA512

    863889bc166467a8708d5f2364935bd4f6d4522f676a87309c0eca01d2de0de9e22b4d9001c99b86ce0c47d868f5c8dcaf294854529da0f229d0fff4b916632f

  • SSDEEP

    3145728:NjlKg03F2q3qRUP2yxoZ2GHlXgXHQeSjFTttNI1KAw+WxDen:NjlKg0V2JnyxoA2lyweYF3NCKAw+Wx6n

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • Krnl.zip
    .zip

    Password: infected

  • Krnl/$I30
  • Krnl/Community/$I30
  • Krnl/Community/Cmdx/card.config
  • Krnl/Community/Cmdx/preview.png
    .png
  • Krnl/Community/Cmdx/profile.png
    .png
  • Krnl/Community/Cmdx/script.lua
  • Krnl/Community/DomainX/card.config
  • Krnl/Community/DomainX/preview.png
    .png
  • Krnl/Community/DomainX/profile.png
    .png
  • Krnl/Community/DomainX/script.lua
  • Krnl/Community/Hydroxide/$I30
  • Krnl/Community/Hydroxide/card.config
  • Krnl/Community/Hydroxide/preview.png
    .png
  • Krnl/Community/Hydroxide/profile.png
    .png
  • Krnl/Community/Hydroxide/script.lua
  • Krnl/Community/Hydroxide/tags.config
  • Krnl/Community/Infinite Yield/card.config
  • Krnl/Community/Infinite Yield/preview.png
    .png
  • Krnl/Community/Infinite Yield/profile.png
    .png
  • Krnl/Community/Infinite Yield/script.lua
  • Krnl/Community/Orca/card.config
  • Krnl/Community/Orca/preview.png
    .png
  • Krnl/Community/Orca/profile.png
    .png
  • Krnl/Community/Orca/script.lua
  • Krnl/Community/Secure Dex/card.config
  • Krnl/Community/Secure Dex/preview.png
    .png
  • Krnl/Community/Secure Dex/profile.png
    .png
  • Krnl/Community/Secure Dex/script.lua
  • Krnl/Community/Solaris Hub/$I30
  • Krnl/Community/Solaris Hub/card.config
  • Krnl/Community/Solaris Hub/preview.png
    .png
  • Krnl/Community/Solaris Hub/profile.png
    .png
  • Krnl/Community/Solaris Hub/script.lua
  • Krnl/Community/Solaris Hub/tags.config
  • Krnl/Data/$I30
  • Krnl/Data/7z.NET.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Krnl/Data/7za.exe
    .exe windows x86

    00610cd693a2c7bea922440646a9789b


    Headers

    Imports

    Sections

  • Krnl/Data/Community.7z
    .7z
  • Krnl/Data/SavedTabs/Untitled/script.lua
  • Krnl/Data/SavedTabs/Untitled/tab.config
  • Krnl/Data/SavedTabs/tabs.config
  • Krnl/Data/krnl.config
  • Krnl/GPUCache/data_0
  • Krnl/GPUCache/data_1
  • Krnl/GPUCache/data_2
  • Krnl/GPUCache/data_3
  • Krnl/GPUCache/index
  • Krnl/KrnlUI.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • Krnl/KrnlUI.exe.config
  • Krnl/Monaco/.git/$I30
  • Krnl/Monaco/.git/HEAD
  • Krnl/Monaco/.git/config
  • Krnl/Monaco/.git/description
  • Krnl/Monaco/.git/hooks/$I30
  • Krnl/Monaco/.git/hooks/applypatch-msg.sample
    .sh linux
  • Krnl/Monaco/.git/hooks/commit-msg.sample
    .sh linux
  • Krnl/Monaco/.git/hooks/fsmonitor-watchman.sample
    .sh linux
  • Krnl/Monaco/.git/hooks/post-update.sample
    .sh linux
  • Krnl/Monaco/.git/hooks/pre-applypatch.sample
    .sh linux
  • Krnl/Monaco/.git/hooks/pre-commit.sample
    .sh linux
  • Krnl/Monaco/.git/hooks/pre-merge-commit.sample
    .sh linux
  • Krnl/Monaco/.git/hooks/pre-push.sample
    .sh linux
  • Krnl/Monaco/.git/hooks/pre-rebase.sample
    .sh linux
  • Krnl/Monaco/.git/hooks/pre-receive.sample
    .sh linux
  • Krnl/Monaco/.git/hooks/prepare-commit-msg.sample
    .sh linux
  • Krnl/Monaco/.git/hooks/update.sample
    .sh linux
  • Krnl/Monaco/.git/info/exclude
  • Krnl/Monaco/Fonts/JetBrainsMono-Regular.ttf
  • Krnl/Monaco/Fonts/JetBrainsMono-Regular.woff2
  • Krnl/Monaco/Monaco.html
    .js
  • Krnl/Monaco/vs/base/browser/ui/codicons/codicon/codicon.ttf
  • Krnl/Monaco/vs/base/worker/workerMain.js
    .js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes.js
    .js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/$I30
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/base.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/classes.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/classes/$I30
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/classes/DataModel.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/classes/Enum.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/classes/EnumItem.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/classes/Enums.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/classes/Instance.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/classes/Model.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/classes/RBXScriptSignal.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/classes/ServiceProvider.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/classes/Workspace.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/functions-krnl.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/functions.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/globals.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/keywords.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/libraries/$I30
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/libraries/Drawing.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/libraries/Krnl.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/libraries/debug.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/libraries/math.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/libraries/table.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/libraries/task.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/modules-table.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/modules.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/params/DataModelServices.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/params/DrawingTypes.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/params/InstanceClasses.js
  • Krnl/Monaco/vs/basic-languages/lua/autocompletes/snippets.js
  • Krnl/Monaco/vs/basic-languages/lua/lua.js
    .js
  • Krnl/Monaco/vs/basic-languages/lua/snippets.js
  • Krnl/Monaco/vs/basic-languages/monaco.contribution.js
    .js
  • Krnl/Monaco/vs/editor/$I30
  • Krnl/Monaco/vs/editor/editor.main.css
  • Krnl/Monaco/vs/editor/editor.main.js
    .js
  • Krnl/Monaco/vs/editor/editor.main.nls.de.js
  • Krnl/Monaco/vs/editor/editor.main.nls.es.js
  • Krnl/Monaco/vs/editor/editor.main.nls.fr.js
  • Krnl/Monaco/vs/editor/editor.main.nls.it.js
  • Krnl/Monaco/vs/editor/editor.main.nls.ja.js
  • Krnl/Monaco/vs/editor/editor.main.nls.js
  • Krnl/Monaco/vs/editor/editor.main.nls.ko.js
  • Krnl/Monaco/vs/editor/editor.main.nls.ru.js
  • Krnl/Monaco/vs/editor/editor.main.nls.zh-cn.js
  • Krnl/Monaco/vs/editor/editor.main.nls.zh-tw.js
  • Krnl/Monaco/vs/loader.js
    .js
  • Krnl/bin/$I30
  • Krnl/bin/CefSharp.BrowserSubprocess.Core.dll
    .dll windows x86

    f489ef325b2cc6c1b748a56dfe9a7d0e


    Headers

    Imports

    Exports

    Sections

  • Krnl/bin/CefSharp.BrowserSubprocess.Core.pdb
  • Krnl/bin/CefSharp.BrowserSubprocess.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Krnl/bin/CefSharp.BrowserSubprocess.pdb
  • Krnl/bin/CefSharp.Core.Runtime.dll
    .dll windows x86

    fd8e72bb9c16ea88be439df1c98658a6


    Headers

    Imports

    Exports

    Sections

  • Krnl/bin/CefSharp.Core.Runtime.pdb
  • Krnl/bin/CefSharp.Core.Runtime.xml
    .xml
  • Krnl/bin/CefSharp.Core.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Krnl/bin/CefSharp.Core.pdb
  • Krnl/bin/CefSharp.Core.xml
    .xml .js
  • Krnl/bin/CefSharp.Wpf.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Krnl/bin/CefSharp.Wpf.pdb
  • Krnl/bin/CefSharp.Wpf.xml
    .xml .js
  • Krnl/bin/CefSharp.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Krnl/bin/CefSharp.pdb
  • Krnl/bin/CefSharp.xml
    .xml
  • Krnl/bin/KrnlUI.pdb
  • Krnl/bin/LICENSE.txt
  • Krnl/bin/README.txt
  • Krnl/bin/chrome_100_percent.pak
  • Krnl/bin/chrome_200_percent.pak
  • Krnl/bin/chrome_elf.dll
    .dll windows x86

    5eb2e4baeaae60bf14bfa7befcd82079


    Headers

    Imports

    Exports

    Sections

  • Krnl/bin/d3dcompiler_47.dll
    .dll windows x86

    185ce3a45c3a9cfb3bf83afd7f79c140


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Krnl/bin/icudtl.dat
  • Krnl/bin/libEGL.dll
    .dll windows x86

    671e9b94c17af069171fc66ac98b577e


    Headers

    Imports

    Exports

    Sections

  • Krnl/bin/libGLESv2.dll
    .dll windows x86

    f57b063473f1876c9b4683fa8f92be4b


    Headers

    Imports

    Exports

    Sections

  • Krnl/bin/libcef.dll
    .dll windows x86

    a3bc49920c771f79d2381896949bee2a


    Headers

    Imports

    Exports

    Sections

  • Krnl/bin/locales/$I30
  • Krnl/bin/locales/am.pak
  • Krnl/bin/locales/ar.pak
  • Krnl/bin/locales/bg.pak
  • Krnl/bin/locales/bn.pak
  • Krnl/bin/locales/ca.pak
  • Krnl/bin/locales/cs.pak
  • Krnl/bin/locales/da.pak
  • Krnl/bin/locales/de.pak
  • Krnl/bin/locales/el.pak
  • Krnl/bin/locales/en-GB.pak
  • Krnl/bin/locales/en-US.pak
  • Krnl/bin/locales/es-419.pak
  • Krnl/bin/locales/es.pak
  • Krnl/bin/locales/et.pak
  • Krnl/bin/locales/fa.pak
  • Krnl/bin/locales/fi.pak
  • Krnl/bin/locales/fil.pak
  • Krnl/bin/locales/fr.pak
  • Krnl/bin/locales/gu.pak
  • Krnl/bin/locales/he.pak
  • Krnl/bin/locales/hi.pak
  • Krnl/bin/locales/hr.pak
  • Krnl/bin/locales/hu.pak
  • Krnl/bin/locales/id.pak
  • Krnl/bin/locales/it.pak
  • Krnl/bin/locales/ja.pak
  • Krnl/bin/locales/kn.pak
  • Krnl/bin/locales/ko.pak
  • Krnl/bin/locales/lt.pak
  • Krnl/bin/locales/lv.pak
  • Krnl/bin/locales/ml.pak
  • Krnl/bin/locales/mr.pak
  • Krnl/bin/locales/ms.pak
  • Krnl/bin/locales/nb.pak
  • Krnl/bin/locales/nl.pak
  • Krnl/bin/locales/pl.pak
  • Krnl/bin/locales/pt-BR.pak
  • Krnl/bin/locales/pt-PT.pak
  • Krnl/bin/locales/ro.pak
  • Krnl/bin/locales/ru.pak
  • Krnl/bin/locales/sk.pak
  • Krnl/bin/locales/sl.pak
  • Krnl/bin/locales/sr.pak
  • Krnl/bin/locales/sv.pak
  • Krnl/bin/locales/sw.pak
  • Krnl/bin/locales/ta.pak
  • Krnl/bin/locales/te.pak
  • Krnl/bin/locales/th.pak
  • Krnl/bin/locales/tr.pak
  • Krnl/bin/locales/uk.pak
  • Krnl/bin/locales/vi.pak
  • Krnl/bin/locales/zh-CN.pak
  • Krnl/bin/locales/zh-TW.pak
  • Krnl/bin/resources.pak
  • Krnl/bin/snapshot_blob.bin
  • Krnl/bin/swiftshader/libEGL.dll
    .dll windows x86

    7466b86b241e6faa3c539091b280b3a3


    Headers

    Imports

    Exports

    Sections

  • Krnl/bin/swiftshader/libGLESv2.dll
    .dll windows x86

    b85270df2817667c40fde4ad43f6b7a8


    Headers

    Imports

    Exports

    Sections

  • Krnl/bin/v8_context_snapshot.bin
  • Krnl/bin/vk_swiftshader.dll
    .dll windows x86

    98aa6edd9e515f46dd334da3d64e410d


    Headers

    Imports

    Exports

    Sections

  • Krnl/bin/vk_swiftshader_icd.json
  • Krnl/bin/vulkan-1.dll
    .dll windows x86

    555db08aac990c6cbb99d14d12be6861


    Headers

    Imports

    Exports

    Sections

  • Krnl/injector.dll
    .dll windows x86

    895bb0ea23fa846711dd9de279e9ff9e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Krnl/krnl.dll
    .dll windows x86

    18cca9a178923a3cd29f2e2ee5a6389f


    Headers

    Imports

    Sections