General

  • Target

    KRNL (rbxscript.com).rar

  • Size

    5.5MB

  • MD5

    f17c325e622972a3b9115a7d553a9930

  • SHA1

    0a9cc7ca1bcc2ae2b05f6470f9aa9c47a549f0ca

  • SHA256

    e8659c723a23250bb287096a9ebf389791eca9b02ce109ed082ca8785115ea7b

  • SHA512

    b9016fd16c4db805d777a22da422b70bb5df7276b73124f904437eba3f96541ee308c7f00015d957b0486a00a5cb3276577a87d5638b2c10ce1e686b43f59890

  • SSDEEP

    98304:dPXVuDOSDzIQalGba4ZuMQz2ksjGVGV7MaZYLTyglm+zBeBhC7u1r1Cr9aQxU5:dPl9UzIQstzfcGVUZ6TLQ8BeAuJ141W

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • KRNL (rbxscript.com).rar
    .rar
  • KRNLWRD/Bunifu_UI_v1.5.3.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • KRNLWRD/ScintillaNET.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • KRNLWRD/injector.dll
    .dll windows:6 windows x86 arch:x86

    895bb0ea23fa846711dd9de279e9ff9e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KRNLWRD/krnl.dll
    .dll windows:6 windows x86 arch:x86

    00ec22fbc2292b4b37170788fde1f037


    Headers

    Imports

    Sections

  • KRNLWRD/krnl.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • KRNLWRD/krnlss.exe.config
    .xml