Overview
overview
8Static
static
3@Wanna.Bud...in.zip
windows7-x64
1@Wanna.Bud...in.zip
windows10-1703-x64
1@Wanna.Bud...in.zip
windows10-2004-x64
1@Wanna.Bud...in.zip
windows11-21h2-x64
1Bonzify.exe
windows7-x64
8Bonzify.exe
windows10-1703-x64
8Bonzify.exe
windows10-2004-x64
8Bonzify.exe
windows11-21h2-x64
8LOVE-LETTE...XT.vbs
windows7-x64
1LOVE-LETTE...XT.vbs
windows10-1703-x64
1LOVE-LETTE...XT.vbs
windows10-2004-x64
1LOVE-LETTE...XT.vbs
windows11-21h2-x64
1MEMZ.exe
windows7-x64
6MEMZ.exe
windows10-1703-x64
7MEMZ.exe
windows10-2004-x64
7MEMZ.exe
windows11-21h2-x64
6salinewin.exe
windows7-x64
8salinewin.exe
windows10-1703-x64
8salinewin.exe
windows10-2004-x64
8salinewin.exe
windows11-21h2-x64
8Analysis
- max time kernel
109s - max time network
119s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
09/03/2024, 17:15
Static task
static1
Behavioral task
behavioral1
Sample
@Wanna.BuddyMemes.win.zip
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
@Wanna.BuddyMemes.win.zip
Resource
win10-20240221-en
Behavioral task
behavioral3
Sample
@Wanna.BuddyMemes.win.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral4
Sample
@Wanna.BuddyMemes.win.zip
Resource
win11-20240221-en
Behavioral task
behavioral5
Sample
Bonzify.exe
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
Bonzify.exe
Resource
win10-20240221-en
Behavioral task
behavioral7
Sample
Bonzify.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral8
Sample
Bonzify.exe
Resource
win11-20240221-en
Behavioral task
behavioral9
Sample
LOVE-LETTER-FOR-YOU.TXT.vbs
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
LOVE-LETTER-FOR-YOU.TXT.vbs
Resource
win10-20240221-en
Behavioral task
behavioral11
Sample
LOVE-LETTER-FOR-YOU.TXT.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral12
Sample
LOVE-LETTER-FOR-YOU.TXT.vbs
Resource
win11-20240221-en
Behavioral task
behavioral13
Sample
MEMZ.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
MEMZ.exe
Resource
win10-20240221-en
Behavioral task
behavioral15
Sample
MEMZ.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral16
Sample
MEMZ.exe
Resource
win11-20240221-en
Behavioral task
behavioral17
Sample
salinewin.exe
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
salinewin.exe
Resource
win10-20240221-en
Behavioral task
behavioral19
Sample
salinewin.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral20
Sample
salinewin.exe
Resource
win11-20240214-en
General
- Target @Wanna.BuddyMemes.win.zip
- Size 5.7MB
- Sample240309-vszm4sda87
- SHA256 1cb1619eb5345a3d8d6aca8a8d221b523aadb3c59ae4778d4d471b22503caa5c
- MD5 0e9a9f123c060ba25b0a940293bbd43a
- SHA1 6a4f0a5f67227c4aa8cfcdbb58c442e399b528e3
- SHA512 bf1beb6fd44dd8d0cc7743951fdac09eaa0408cf6e2984ac73347cc0900eeb142f908546b7e3a1ae5ac4680224ae37881e582d98eac3ade730e6610587b47022
- SSDEEP 98304:RC00b49gKZlvW/erCw1WooPemkiO6jR1DGji0VwoEpe3UxBH772Xg:RC00b49JZlvW/ed1WooWt0JiwoE43UXJ
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\@Wanna.BuddyMemes.win.zip1⤵PID:404
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1996 --field-trial-handle=2284,i,2771196087253062161,8107167670425198948,262144 --variations-seed-version /prefetch:81⤵PID:3852