Overview

overview

10

Static

static

10

Bunifu.Licensing.dll

windows10-2004-x64

10

Bunifu.UI.....3.dll

windows10-2004-x64

1

Bunifu.UI....on.dll

windows10-2004-x64

1

Bunifu.UI....ox.dll

windows10-2004-x64

1

Bunifu.UI....ss.dll

windows10-2004-x64

1

Bunifu.UI....on.dll

windows10-2004-x64

1

Bunifu.UI....ew.dll

windows10-2004-x64

1

Bunifu.UI....er.dll

windows10-2004-x64

1

Bunifu.UI....wn.dll

windows10-2004-x64

1

Bunifu.UI....ck.dll

windows10-2004-x64

1

Bunifu.UI....ge.dll

windows10-2004-x64

1

Bunifu.UI....el.dll

windows10-2004-x64

1

Bunifu.UI....ox.dll

windows10-2004-x64

1

Bunifu.UI....on.dll

windows10-2004-x64

1

Bunifu.UI....el.dll

windows10-2004-x64

1

Bunifu.UI....es.dll

windows10-2004-x64

1

Bunifu.UI....el.dll

windows10-2004-x64

1

Bunifu.UI....ox.dll

windows10-2004-x64

1

Bunifu.UI....ar.dll

windows10-2004-x64

1

Bunifu.UI....on.dll

windows10-2004-x64

1

Bunifu.UI....ng.dll

windows10-2004-x64

1

Bunifu.UI....ar.dll

windows10-2004-x64

1

Bunifu.UI....or.dll

windows10-2004-x64

1

Bunifu.UI....el.dll

windows10-2004-x64

1

Bunifu.UI....es.dll

windows10-2004-x64

1

Bunifu.UI....er.dll

windows10-2004-x64

1

Bunifu.UI....ar.dll

windows10-2004-x64

1

Bunifu.UI....ox.dll

windows10-2004-x64

1

Bunifu.UI....ch.dll

windows10-2004-x64

1

Bunifu.UI....ip.dll

windows10-2004-x64

1

Bunifu.UI....on.dll

windows10-2004-x64

1

Bunifu.UI....ol.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Umbral.Stealer.zip

  • Size

    3.3MB

  • Sample

    240320-wxzdksgb5z

  • MD5

    f355889db3ff6bae624f80f41a52e619

  • SHA1

    47f7916272a81d313e70808270c3c351207b890f

  • SHA256

    8e95865efd39220dfc4abebc27141d9eae288a11981e43f09cbee6bf90347fe0

  • SHA512

    bff7636f6cc0fadfd6f027e2ebda9e80fd5c64d551b2c666929b2d990509af73b082d739f14bb1497be292eafe703ebd5d7188493e2cc34b73d249fe901820eb

  • SSDEEP

    98304:XINn7mVoLvbDU48xzliDSjtYV2jg0tsGTplmOhl88uF:mjLvvD8BcSjtAB0zplNl8Z

Score
10/10
umbralagilenetstealer

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1220069539069563050/zxN4Ew3bBFIRZqePrUxrfkpmDDY33Gr-evzJR44SuGBJ33mnvW2lhPf61k1Eo_Z2Cy1C

Targets

    • Target

      Bunifu.Licensing.dll

    • Size

      1.3MB

    • MD5

      2b2740e0c34a46de31cf9da8a75d77cf

    • SHA1

      242324f1112e6387cda41686291b6e9a415eeb8c

    • SHA256

      a9be91cae167702885a5ca74273db779e3e391e2e604cc03779ed403c53ebe43

    • SHA512

      605eb300b159e6ed2ee872b6ee378eed7dde6541000221fcd94d52057be91cb3c7dd65c7203f05e0718303b157b6fb941498b5e653501f97f0417d459da6bc40

    • SSDEEP

      24576:ebkurkdR5uuMeiPUf2lHmdpjrcbYdwcqMw5LTvBrq/WGs1xGUfGUCco:a1roD9MeiUDDjrW4bqD5LDBrqWG0GUfX

    Score
    10/10
    umbralagilenetstealer

    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

      stealerumbral

    • Executes dropped EXE

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

    • Target

      Bunifu.UI.WinForms.1.5.3.dll

    • Size

      342KB

    • MD5

      41c216d27c71a227774e680e95e99f31

    • SHA1

      0a2a93d4ecbf4bbec2faf110066c6b4472b0dbf5

    • SHA256

      012d717b4ac00c3686a772757f49c1908e223624e3974314cdb9fc9291073305

    • SHA512

      e355ba11e41b668e4459f709e87c3e212c8986ea894791d9155791ea9d7315372fb51531eb69204ed2ee38e242de7629e4a2f090c05bf9deeea9ea965ffaf651

    • SSDEEP

      6144:3e5XJsDZGUbIf5kqw23B1Q8g2iYcHIc6uWXMIFidNw:qMZGUbIf5T37Q8ncHNAMhNw

    Score
    1/10
    behavioral2

    • Target

      Bunifu.UI.WinForms.BunifuButton.dll

    • Size

      107KB

    • MD5

      21f999e5ac72a16077511d41590822de

    • SHA1

      d8bb1a8a291f73cdf2b5658b2b65736c87db19dd

    • SHA256

      2a62c78f1f0db2e3258135b50f7885e6734c31c74a8f2f5782f285aa268c2f71

    • SHA512

      e04fe31870f266d772829053a6bb210a9513ff5c8c0f9a3a267ddbe1875125496caa602baf44a4e241ef84d933bd55b79af43d5871ed10c81711adecee78b8e3

    • SSDEEP

      3072:tgiMibnDED3/7f2ih0xdGzFpzUHgmCFKHUUZP0tTwmnkyY:xDDED3/7f2ih0xdGzFpzUHgmCFKHvF0e

    Score
    1/10
    behavioral3

    • Target

      Bunifu.UI.WinForms.BunifuCheckBox.dll

    • Size

      102KB

    • MD5

      ef11f59a9381df17d7ab94434f79f260

    • SHA1

      ec11e46a636fe3927fd5fa7c30be65b958853ef0

    • SHA256

      390252aeb6fd76a954a03853c3d883e0360dc8b3f2cf8cfed5ba94e4e5a24da4

    • SHA512

      612b1b0f9204c605ff5e9b91816e674cdaea71fa69f81a5a7f475bf1cc8d5e12687deb1b0118b07b3d7e4764adede0576f8fc799f8155a65a70e5dafff50f73d

    • SSDEEP

      1536:JiQsfF22IDMxiQ9MOWnce1Cua4JfhwuKeWbZ6YlX52o3tWQFeOvTT:JifF22IoxChnv1CuhW1xCwdeOvX

    Score
    1/10
    behavioral4

    • Target

      Bunifu.UI.WinForms.BunifuCircleProgress.dll

    • Size

      77KB

    • MD5

      bc930a050ca23ea75dbd9deade4189bb

    • SHA1

      e6878d381ac1c37c331fd01a25b2ec508e1c1a21

    • SHA256

      d5ed95667aa44a80278b80a90413c0de9d85eeb3ca1fa24a40ae71c3ad88d837

    • SHA512

      20e2bb3661d2817082c2aa01381b5aee8582fea5fc54be486de5b1e48f302a15779ebe5670221774a5a4d031248b342f3c86084de4f023c197cd210857fb3ff3

    • SSDEEP

      768:A8ioretsy7GQLZvAQFe1zbnprSBaqII0OsWjc1B5Nl4WfWQAz6uJi8B4dgUp2hQf:JixnZYQFe722Wj8l4oL+6uJ/BZ4ZTz

    Score
    1/10
    behavioral5

    • Target

      Bunifu.UI.WinForms.BunifuColorTransition.dll

    • Size

      38KB

    • MD5

      539d803013c0b1592d0e17a740d72687

    • SHA1

      b0ce15e0f096d027b1d1482afa9d93bafd160f7a

    • SHA256

      500adece1fba76dfb2fa628de9886a2661ed1a4e58a7717a5fee607206bb1d81

    • SHA512

      77d8ab7a949db41a79371cf2ebd5d67bd4a38dd040de0073c878f50b2a6409fae2dc5db7cbf375fbc1bc571838b0a6d4848bdecc1420d91633b878585c94b9dd

    • SSDEEP

      768:2SfWaEnnh2U2DaRIx0qVuQ/90iAzNIewCqyU659bTTvtM/3JhQTifZs:cs0qVb/95+6ewCqyZ9bfvk0TWZs

    Score
    1/10
    behavioral6

    • Target

      Bunifu.UI.WinForms.BunifuDataGridView.dll

    • Size

      83KB

    • MD5

      53765ad5b31fd87986a569bbb79f402c

    • SHA1

      75c7ec63458c79ded533d1d4175de4117036adae

    • SHA256

      9e61bd6dbcc8d5866bf3a139ea12f453ef4ca8bab28c08329cbc5f0bf13950df

    • SHA512

      ea129aab13b09e817be6210bc423bcf4e024c83a5a0340941e7658d4dd0ef6f3b40077527f7d168849ad947650a00d360fa6a5f64c4a8f14dfe72cd4d34469d3

    • SSDEEP

      1536:YNBBIrOTrgVCuiPwacJigM8H+duT0R0xSJQ9FTiIb8EtTG:YNBoGgsPiJfedkvu/IFtC

    Score
    1/10
    behavioral7

    • Target

      Bunifu.UI.WinForms.BunifuDatePicker.dll

    • Size

      50KB

    • MD5

      a05882bac172c61b5b1bd3f4a56b4320

    • SHA1

      9a725973aa498472c253382ff8d766a5d3a41697

    • SHA256

      3c1ac3e39665e49327b64887131a53c63379de884b3a6f9a0ab96a36e882ceb7

    • SHA512

      a503f5cd0211b123618ecaff83a7930a6b547a1afaad1b93cc5e60bc859e255585a8a94832747422de139f2fe6451b2fcf46b31bac20e12ce60f97983e1af493

    • SSDEEP

      768:KMzEetGON+bjRFOchYvP0pbwk4LAzn21AXrpKXyvcgq8/i7l5THL8ZFxIZYzUebj:HsONqjRFO2ZxXpHraUNaT0

    Score
    1/10
    behavioral8

    • Target

      Bunifu.UI.WinForms.BunifuDropdown.dll

    • Size

      50KB

    • MD5

      5bc3c478e3c44caf765c6e998dc621f0

    • SHA1

      8cd06d3ec991ae3d5c0d935ea03fd7c06d504d53

    • SHA256

      f746eef49caaf23939999a89c86787e6d1f4e4c16f667bcfebcaeacb5276e0c8

    • SHA512

      3990c0a716e2e0619cd969d75666cacf695b6d40a118ead8a810997a594b558250e4a661e303f383f58bc52cac90e84a2049a50a1295f762b2bdbdb8661c33f0

    • SSDEEP

      768:WxidV98e5TsEQgzWC/Vzv/8vWvLMFZhjd5hQTi7q:Y3ehsEQAWQHgW4Zhx0TN

    Score
    1/10
    behavioral9

    • Target

      Bunifu.UI.WinForms.BunifuFormDock.dll

    • Size

      102KB

    • MD5

      fff8d46f94011c5bfa4bc1d1fbde3eaa

    • SHA1

      c5e978eb89e9646423c3b2a1d7d2651cdbee90f0

    • SHA256

      f8052b4641fea785ef643bc06d0e5383555c0845bbe695099bc41ab09a180ef6

    • SHA512

      61af0253c05bd33d43d34799eb74d97ae9e3e700281273895026d690f39e3de97034ee51511284a4b6a4150d31977f7ac6fbf4047aa19825564a15eae8be079a

    • SSDEEP

      3072:wVypYUOJdOb8UD8m1PxGFXflE2BHjvZKDq6CN:wVypYUSXdbBjvZKDq1N

    Score
    1/10
    behavioral10

    • Target

      Bunifu.UI.WinForms.BunifuGauge.dll

    • Size

      74KB

    • MD5

      161768e00f22118c66a84d22e658b008

    • SHA1

      7645e52d1aeac19169c8cd1b411200ee808295b8

    • SHA256

      0edc3396eb94c33fca4889c5a379e29aed354469957ee55893f565d8f824cacc

    • SHA512

      cfcbc3e642f6f9cf904b993a6112e2304055cd88e9bbe2d818842d4e93a5f71ff6a09f8d36c6a64de8701435cabbddbff765307f8c110dcb5bb14d805aeb3422

    • SSDEEP

      768:POPW1cKm3/WnwISrek0JCPRjNEp5lW1T31fNEDqz6Zi6EgmaFLGiLjyQXAhQTiQb:PUZewEQRSXlEaDA6w3g7wi3yWLTbb

    Score
    1/10
    behavioral11

    • Target

      Bunifu.UI.WinForms.BunifuGradientPanel.dll

    • Size

      60KB

    • MD5

      58be3fb2879bf2614b7854b0e184521a

    • SHA1

      fbdce08394b1d11a961c0684d5c0013507dff9e5

    • SHA256

      6811dc0f98d2ce9816475207badd010564b7be460f48b8480664f9184824ce5f

    • SHA512

      a5635f09a943e0dd969b648ab7d929ba16d734ebc13f96ebde95d1a5cd91e14ba1b2e105c7414816f3d535bbe2be4ad861a16e25d84c2d12dd025898f3743b0d

    • SSDEEP

      1536:FpoDvSiiUiiJiiJiiYiKbfbD7v055J6O5v2wunCT6:aSiiUiiJiiJiiYiKbz+bB0Ce

    Score
    1/10
    behavioral12

    • Target

      Bunifu.UI.WinForms.BunifuGroupBox.dll

    • Size

      46KB

    • MD5

      e86aafa7c25a2f1654cf95657cacc39c

    • SHA1

      c9ab7d835b24b294309abed83efff4cdf102906b

    • SHA256

      637b5cac86e245c53af91e41e6479de42df1b5fa5a524f931e034f5b5ee1f259

    • SHA512

      8b043a2434681773c6e3d8e73fde70fbb666f57a30f5e3514634ccf5c714979fa89769fc54e3e01fba91c5ac916db44054fdd2a65b4a6c35869b695b8696d96a

    • SSDEEP

      768:jODM3ey49Uo613D9ddld3LTeBNsRfMzIz6FzHGptXZEchQTits:jODM3eySWd3/jRam6FzHG2HT6s

    Score
    1/10
    behavioral13

    • Target

      Bunifu.UI.WinForms.BunifuImageButton.dll

    • Size

      155KB

    • MD5

      7d68b8af58c87ee29eca74fe8ef2f093

    • SHA1

      16e8d2004d2c3a71a8dcb6983b72537079ccfd3b

    • SHA256

      32b8eb2fae4a14e8319448cd173b73a8e63234b3816d6407ef95be204cec226d

    • SHA512

      6c3f90e7596e0a73cc5da77b92b2d4ed248e49aba2c0c299be4400b8841782415820a44bcca1635a224edc90444559ed14de7dc23fbb7133c0bd86fe93ecd236

    • SSDEEP

      3072:28cu9fbsLqRKynlLWwUGR3BKRqbpqtqzh4E6jt/:zfbsFulLASYqddzcZ/

    Score
    1/10
    behavioral14

    • Target

      Bunifu.UI.WinForms.BunifuLabel.dll

    • Size

      420KB

    • MD5

      73ca0338c9c3b7901d3621b346c76a7a

    • SHA1

      79d26ee6e1bf0beb2ee0593562592de8ff01935b

    • SHA256

      a505193910f7b8fd6123c00bb437bff3d2a4f28c970e24207d395554765e6ad4

    • SHA512

      53e0b84dffbec8e465955bc91f1207ba56a55543ba3c00c66997b3ee3d4cb904e027915a12f7a9dc79ffef4cde633c9b7543436c4ab97785ca2169bc3d4aeede

    • SSDEEP

      6144:IMiEH8iZBKX+7haZYjw1MLZRD0fxrmfD4DJL5f:IMNhZjwKLDCVf5f

    Score
    1/10
    behavioral15

    • Target

      Bunifu.UI.WinForms.BunifuPages.dll

    • Size

      95KB

    • MD5

      170b18df5b12f1eb01c2de4a03e1a043

    • SHA1

      2fa3dde71cd17bc2a9fbe8dc05f5e50c94f6cb16

    • SHA256

      633c77cbd4074c428a593e9c9769926ecfd484b40305062c6c268edb1fac44ff

    • SHA512

      8af0aac446d8efbd0b6cfa58093e21b1201e03057df42d922215237adeebee7d5fc9096d526761424092c2131ae3e0ba9696cf2b51b3aff4f91f0e1902b1b053

    • SSDEEP

      1536:QbEFvWVvz9NOLQ1p7eCweuT2CWvlcHF/BmEwMDc2xgAPWTUh:bvmZkLQ/wLT2LcHZBiMVxgAPWwh

    Score
    1/10
    behavioral16

    • Target

      Bunifu.UI.WinForms.BunifuPanel.dll

    • Size

      42KB

    • MD5

      ba5a73023ac466e78f54fa87460dda16

    • SHA1

      15b7b81172ef13e72e6b55d93f512d3c660f8238

    • SHA256

      4404f91ebc3aa2b018dc98039edacd02c4578f7c581e27ab902fb7c8a8eb76fe

    • SHA512

      8eb1ff4d2c420fc2d832f8d7d8c05d0e63145bf132c5b0622d8cbc515a89dd735f985e2a0c723fe8d6b95b37cd7c56c70c2e1cae3d183d600e8b83d2d522ad7c

    • SSDEEP

      768:j87knLt2VL6NhPxCb6yH4EgrtR8pLBsyv29UFsxztf8gVnzFy+KDj/njd3m7Vejb:47knJ2l6Nh5Cb6yH4EgrtR8pLBsyv29u

    Score
    1/10
    behavioral17

    • Target

      Bunifu.UI.WinForms.BunifuPictureBox.dll

    • Size

      36KB

    • MD5

      9c0c94890f9c941bfa9736adc7b8b535

    • SHA1

      4f8e79cda2c407c7dd0421554bbe24d6a180dae9

    • SHA256

      2cee0aff33f80d8db13831c04687dce28a5f4d8356461553a3f51f077bd9f875

    • SHA512

      349ce7c0b2c068fa1365773052fc8771b37ac2b23b6ea4d8f546471f2e79ea96f945d23b3a96019cf1e72d63ea424c182a064c0d5b5eafbbd8b3e185e9889722

    • SSDEEP

      768:vqd07rjIiq27vDr920odL5PzQ8fbstfrWHlpmA37nmH4hQTij:/q27vPI0odLpQS4froUugzTs

    Score
    1/10
    behavioral18

    • Target

      Bunifu.UI.WinForms.BunifuProgressBar.dll

    • Size

      76KB

    • MD5

      e08551ac64936f619d33d53de1baaf60

    • SHA1

      254ce04897946348e25c45d9e22638bf64fec6ce

    • SHA256

      7344febb0946f7555127a8dce09b4df3c430a3805bfd5964c477c36f98303be7

    • SHA512

      17e220a1f3b9eb1017f34a9327cde9b8276d5db0eb10c1ad08c68ac2b1c60873c1f5f8dabb8af382ec4d1b83a767c5435837835ef0c2d341555fe21b8948cf4c

    • SSDEEP

      768:zm6fVYmVH9VRninLAmjl/AurKv77XXwLsp4Ds5Y2XUTunDD+0bO1KNjh1ekrnDuh:E5QAx7NFpS2Ttm+BXQV0zXVVzXuQTT

    Score
    1/10
    behavioral19

    • Target

      Bunifu.UI.WinForms.BunifuRadioButton.dll

    • Size

      68KB

    • MD5

      2ba0461d0e46a3cdb553230be6d9e9d6

    • SHA1

      316a26cbc90735a276bc914bc492dd0da2cb7cad

    • SHA256

      c0fd5f368332a8a5794325c89d5e66e2ed74db69a0f592c75d6fd6c3518f73d7

    • SHA512

      d489eaa8299805923a08e33813f82d61c0d4267cff3fd8eed889f2ca6dd34239a1cc188f7a72b10a0ae04a7eea9a9517f659d8767987229262676bdeeaf84a32

    • SSDEEP

      1536:vZsbjXEa+pNKSq5c9ugzX7BF0Xh9UVqIrK7Of08WqOSySGvieagbORNIjOwOFnJ0:vZ0jl+jKSq5c9ugzX7BF0Xh9UVqIrK7d

    Score
    1/10
    behavioral20

    • Target

      Bunifu.UI.WinForms.BunifuRating.dll

    • Size

      49KB

    • MD5

      7224c8510e42a78c9bb147e9c30a4df4

    • SHA1

      0a3022798b8006c5d51cbc7c8cfb4528a2d75c3b

    • SHA256

      b0a971f43a25842db9b3c72c10bb6abfed0daae90566df7f23253e3bbcbc4ba9

    • SHA512

      c9119462eeb9c62a0ebaee9a05e017a1cf80f1de37bbea9242460fcb24154c7b3a94dc8a7e19d7e9198c349055c22912eff8417d9a2e1713f48b6b97cc26873d

    • SSDEEP

      768:UVf5PVg0Ts0+azK7+Eqm0Mvv8JgzNp6x/xCRyifQXSfbKNJ9hQTiAT:AVJTs0+azu10MvJNp6IfQX8KbYTnT

    Score
    1/10
    behavioral21

    • Target

      Bunifu.UI.WinForms.BunifuScrollBar.dll

    • Size

      178KB

    • MD5

      5d8b299875c4e5f6ef079bd13a15351a

    • SHA1

      8f4f33d477ca7d3cea872bc4ebfdaae401c3b6fd

    • SHA256

      cb989842e3c3d9baf79550f6e826ae20226b24178ab4ad279c76a3b4983294f2

    • SHA512

      7159a79f748e7e947e9d56c17133e2ffabafc5672cd4c0c89fc854fd520df525530795d30b4170eb427a807479414eabc8364700c697c958c305d005c1d34396

    • SSDEEP

      3072:dqtazpVUOZj1+8vP24DzyY4L+i5flfvCYPaRUKpmFRycau3:wcQghPZDmY4L+i5f1vCYPaRU2mFRz53

    Score
    1/10
    behavioral22

    • Target

      Bunifu.UI.WinForms.BunifuSeparator.dll

    • Size

      37KB

    • MD5

      5a389e93f449d77bb0b685fa40f14a95

    • SHA1

      94a5848f149a8b4fd8bbf401d43bcdaae1765829

    • SHA256

      9c2c4d272ce8fa98a6100fa668190e5084f69ee9e75e0075e267fdf1811c5738

    • SHA512

      73efd93390eb188272b922b0a95d28fc7b4a0eb0006dcd62210cd2a2b8265ce804cde5415133f6da6aeeffb179eed2e1e2d0368676173df8fe563e805bf8b00a

    • SSDEEP

      768:N6/wh8zZ1LDNH8FOXAJyr09GvYBqjs1+Hw5ibkt2fIxaTclu3gpSLUdWUU7CGtOe:2DN57CGUFWKGWkq79Tal

    Score
    1/10
    behavioral23

    • Target

      Bunifu.UI.WinForms.BunifuShadowPanel.dll

    • Size

      45KB

    • MD5

      ebaf1a6efa8c7a04d174be7e0df602a7

    • SHA1

      ce08c80e52b6cf3f62ba82408d8f32ae6bcef0d8

    • SHA256

      1858b16074d7f9b73f462e3adcc77309800594fa96f2e0904c810eda4eaf5e86

    • SHA512

      4ffd5dcb59a4a03273c4e88047c7d398f098302b9485d07cf5549ca0d72467102aafa69298e248250df154a8b09f7560e634cca9cb1af2838baf3965aa645b31

    • SSDEEP

      768:Zq2Z1jRTnTpK4EBwmUy6fRXLvXcU8knpZlvliQVk3+aIS1GzsQxDzpYElRgyszhL:ZNnlK4EBwmUy6fRXLvXD8knPq+lS1cs5

    Score
    1/10
    behavioral24

    • Target

      Bunifu.UI.WinForms.BunifuShapes.dll

    • Size

      41KB

    • MD5

      766bac8424dff377682453d70a9a8ac4

    • SHA1

      1cea8cb48d0e33c010bce20244520b79491f6e6c

    • SHA256

      77191715d649c33ab2b4e1a976349252abcf6628012515e881f2e65d0d4a9709

    • SHA512

      06b00c021342748bf147736ccbc93ab286d985fc0bd26dc3e9ff4290eaa3997b5105a1b4d365fcfe24099333d1d608b06a19456c28c7e4049c29cdf099b317e2

    • SSDEEP

      768:lsXwjYdAepHnxwo64Giy/UhHPzWByJ9+4jhQTi+P:/sAQHxwoGbUBWByJheTB

    Score
    1/10
    behavioral25

    • Target

      Bunifu.UI.WinForms.BunifuSlider.dll

    • Size

      196KB

    • MD5

      9914005dedbf5f81be2741ce71cbe63f

    • SHA1

      493a5a01dabf629192fe90f15194587e5814dba2

    • SHA256

      22e686373bb1556ec3e044061c727c7b11cb1e6ad3b15862ed7e815e35567df9

    • SHA512

      be5037ab18c8b45f0661035151f0fc05f387bd69b9b62fb3ba3380204a094f45e78ebb181616e2eeff7347622122bca82a64ecfe4d48aeb6899c4038f1d11fa3

    • SSDEEP

      6144:ktwUO/j558MwE2ogicLoqP+QBwa/oZnyazz5s:YwUO/j558MwAccqP+c/oZym5s

    Score
    1/10
    behavioral26

    • Target

      Bunifu.UI.WinForms.BunifuSnackbar.dll

    • Size

      271KB

    • MD5

      5381c510a37e3f31f5d90aa321b4bfd1

    • SHA1

      ae8936a05d58236b3b538712505a353c080d894b

    • SHA256

      97173a3d47073de685b55faf2d895130e7ca115b7fb23c7b845d176b1659d7a9

    • SHA512

      2790e342e6a95cfc3f770fae95530c6eac25ae44cd42609176b5f7aab112622bbde13d91ab56e09dcaaa98575ad8ea1c02a4388863c4bc4063a522fd2fba2cf6

    • SSDEEP

      6144:6aQw5nUoVWa8EWtwrRM7ffGpUyAWfhmCb4xo:P5nUoVnrRMDGpnVCo

    Score
    1/10
    behavioral27

    • Target

      Bunifu.UI.WinForms.BunifuTextBox.dll

    • Size

      112KB

    • MD5

      fd2042c49df3e74e096b8cee8cc9fe43

    • SHA1

      4ccdb0e13c24fb71f502d50e34f00c39bcacf307

    • SHA256

      4569393e1aad7498c6a7c8a84f79d0cd7a1d0656e912d0ddb607b61163673976

    • SHA512

      c93ad9cb411c311b0feeefdf2089c0c13098c7d2bab56345f4e9a7fc515965a3893c613d494adbbb066801eeb3dc32237a8322f7a5f876284a06b447efdad641

    • SSDEEP

      1536:QjrdQ4aOXffG2ESScROigmC+Voavy5uZJ47b+54T7:QjrddaOPuGxROigBCiQJmy54P

    Score
    1/10
    behavioral28

    • Target

      Bunifu.UI.WinForms.BunifuToggleSwitch.dll

    • Size

      45KB

    • MD5

      717c285f4eaf6b5072b507b2a15f5fa5

    • SHA1

      d363fbc7ba468f03681b7af3296b498521050e31

    • SHA256

      c715af145983f42c0ce74c058bdce5a9a51616b38fd935b05e6be328c014f85a

    • SHA512

      3e615661e23d2f0902b67111f550798587eb15f48bbba166b569b59547d3b93ca5ed7becb11e4b8e1538daebd1e6912823bddb15e6932fe746d6c7b4abc178a2

    • SSDEEP

      768:WE2vdPqXKq8+jeeMxu2nuyX1z5ZCgfD9EYhQTiCS:52lPqZ8+jP8DXp54YDyTTu

    Score
    1/10
    behavioral29

    • Target

      Bunifu.UI.WinForms.BunifuToolTip.dll

    • Size

      521KB

    • MD5

      9cd1c29f2d893fda2c48676b92fa35ab

    • SHA1

      325e7f541f0d2af9def583590a0c1f135206841b

    • SHA256

      899eada5705312259c5845b31d62709c377a3083d4578f58d1ec7547809c780c

    • SHA512

      3553c4bf3419c7b91cc41f89eb5765f52aa67bd410f640e9edccdbc9f3fb86bd1a2be774dba1c8f74279cd681b8151c824dc946ac2e7afcdc8724ea81a38e2b5

    • SSDEEP

      6144:4zuDdMBBdHEhTFCi50KMSvzPdX6ufy1C1j/soY4OkXd1jD6ct1MTXl:4zu5MBBdYkivMSvbdKD1C1jVnjFtOTXl

    Score
    1/10
    behavioral30

    • Target

      Bunifu.UI.WinForms.BunifuTransition.dll

    • Size

      92KB

    • MD5

      db7e06b950f15c1a799d2a049122aa5d

    • SHA1

      445ebb73a64bf910bea401192784446d298bf106

    • SHA256

      c6e038ab3cc0b56551e3613506a5b4028b796a6424ef3c66ef310c901c12f8d7

    • SHA512

      b8f9c9b9e487565f0920dba28a6fec75ff9dcf20ec16988d63f2df7ff2a935e117b98f74f780c6f6806a58d217687cbf4bfcd5de19de2a121998f7291900d119

    • SSDEEP

      1536:WgpjL77cNTSNuma2olzkB8KiqQ1C6sqVzeScHodtu2SMTb:Wgl7oWS2yzkBeqvKiScHStKMX

    Score
    1/10
    behavioral31

    • Target

      Bunifu.UI.WinForms.BunifuUserControl.dll

    • Size

      81KB

    • MD5

      7119e268ba9553cf35b3ad0cd4ac9443

    • SHA1

      97e4dd5546b524b92bd92285ac5a841e45890791

    • SHA256

      41e5f33d14adbfe149d129b42deb826e9dde1c0ed89d91f472a9888219c60692

    • SHA512

      a6f5d8e78b211aa2c32f3736af48e8994fe88d3790d7f76638df78751ab617096865981b3abbed151f673a8db9c0d234a7678b9430ce42888ff1b0bed0f284cd

    • SSDEEP

      768:AEerVJm7yq158UZnVtfp3mufZlTAdkgKVgEyeGKHEVbqFgFlZXVEJAWsotSZqzbD:yxrMZnVtfFQKA2jn/udsWMA3iYT4

    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

agilenetumbral
Score
10/10

behavioral1

umbralagilenetstealer
Score
10/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10