Overview
overview
7Static
static
7Release.rar
windows7-x64
7Release.rar
windows10-2004-x64
3Release/Bu...re.dll
windows7-x64
1Release/Bu...re.dll
windows10-2004-x64
1Release/Bu....3.dll
windows7-x64
1Release/Bu....3.dll
windows10-2004-x64
1Release/Di...PC.dll
windows7-x64
1Release/Di...PC.dll
windows10-2004-x64
1Release/Loader.exe
windows7-x64
1Release/Loader.exe
windows10-2004-x64
1Release/Lo...xe.xml
windows7-x64
1Release/Lo...xe.xml
windows10-2004-x64
1Release/Loader.pdb
windows7-x64
3Release/Loader.pdb
windows10-2004-x64
3Release/Si...UI.dll
windows7-x64
1Release/Si...UI.dll
windows10-2004-x64
1Analysis
-
max time kernel
147s -
max time network
170s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
18-04-2024 13:01
Behavioral task
behavioral1
Sample
Release.rar
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Release.rar
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
Release/Bunifu.Core.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
Release/Bunifu.Core.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
Release/Bunifu_UI_v1.5.3.dll
Resource
win7-20240319-en
Behavioral task
behavioral6
Sample
Release/Bunifu_UI_v1.5.3.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
Release/DiscordRPC.dll
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
Release/DiscordRPC.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
Release/Loader.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Release/Loader.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral11
Sample
Release/Loader.exe.xml
Resource
win7-20240215-en
Behavioral task
behavioral12
Sample
Release/Loader.exe.xml
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Release/Loader.pdb
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Release/Loader.pdb
Resource
win10v2004-20240412-en
Behavioral task
behavioral15
Sample
Release/Siticone.UI.dll
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
Release/Siticone.UI.dll
Resource
win10v2004-20240412-en
General
-
Target
Release.rar
-
Size
3.5MB
-
MD5
2794166c9ddcb72846c4d9967feaffd7
-
SHA1
1b3878c15a1688a417b3a859dbf36b80f67f945e
-
SHA256
275ea14a7479b277d772617a5effe9739a0c1fa7884cb1fb82a23c8607bd2b2d
-
SHA512
785a4613788d608a817056b7cf4d2f5dc826697e1826b0af770c82dcce7e79266d04c0fbc83fa2c223ee410f3ebdba009ba81976cc62c1fe9e74c0a262be4376
-
SSDEEP
98304:Oh9fwTagPOX93KSEpJdZAnQ2Cw8p1PLiJNM9BLLmvIh8Bf5:O3c7ON3F4PZAQY8DBNoIh8Bx
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-3198953144-1466794930-246379610-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3198953144-1466794930-246379610-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 1252 OpenWith.exe