Overview
overview
7Static
static
7Bunifu.Licensing.dll
windows7-x64
1Bunifu.Licensing.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows7-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1Plugins/Camera.dll
windows7-x64
1Plugins/Camera.dll
windows10-2004-x64
1Plugins/Chat.dll
windows7-x64
1Plugins/Chat.dll
windows10-2004-x64
1Plugins/HApps.dll
windows7-x64
1Plugins/HApps.dll
windows10-2004-x64
1Plugins/HBrowser.dll
windows7-x64
1Plugins/HBrowser.dll
windows10-2004-x64
1Plugins/HRDP.dll
windows7-x64
1Plugins/HRDP.dll
windows10-2004-x64
1Plugins/HVNC.dll
windows7-x64
1Plugins/HVNC.dll
windows10-2004-x64
1Plugins/Keylogger.dll
windows7-x64
1Plugins/Keylogger.dll
windows10-2004-x64
1Plugins/Manager.dll
windows7-x64
1Plugins/Manager.dll
windows10-2004-x64
1Plugins/Options.dll
windows7-x64
1Plugins/Options.dll
windows10-2004-x64
1Plugins/Op...rm.dll
windows7-x64
1Plugins/Op...rm.dll
windows10-2004-x64
1Plugins/Passwords.dll
windows7-x64
1Plugins/Passwords.dll
windows10-2004-x64
1Plugins/RAPP.dll
windows7-x64
1Plugins/RAPP.dll
windows10-2004-x64
1Plugins/RDP.dll
windows7-x64
1Plugins/RDP.dll
windows10-2004-x64
1Plugins/Ransom.dll
windows7-x64
1Plugins/Ransom.dll
windows10-2004-x64
1Analysis
-
max time kernel
133s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09-05-2024 18:22
Behavioral task
behavioral1
Sample
Bunifu.Licensing.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Bunifu.Licensing.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Newtonsoft.Json.dll
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
Plugins/Camera.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Plugins/Camera.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Plugins/Chat.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
Plugins/Chat.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
Plugins/HApps.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Plugins/HApps.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
Plugins/HBrowser.dll
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
Plugins/HBrowser.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Plugins/HRDP.dll
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
Plugins/HRDP.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
Plugins/HVNC.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Plugins/HVNC.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
Plugins/Keylogger.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
Plugins/Keylogger.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
Plugins/Manager.dll
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
Plugins/Manager.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral21
Sample
Plugins/Options.dll
Resource
win7-20240215-en
Behavioral task
behavioral22
Sample
Plugins/Options.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
Plugins/OptionsForm.dll
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
Plugins/OptionsForm.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
Plugins/Passwords.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
Plugins/Passwords.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
Plugins/RAPP.dll
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
Plugins/RAPP.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral29
Sample
Plugins/RDP.dll
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
Plugins/RDP.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
Plugins/Ransom.dll
Resource
win7-20240508-en
Behavioral task
behavioral32
Sample
Plugins/Ransom.dll
Resource
win10v2004-20240508-en
General
-
Target
Plugins/HBrowser.dll
-
Size
22KB
-
MD5
ce1d9f8c498cd8c5ee38fa94df4b4907
-
SHA1
d3b811137776e4b1dc937d294ce0eff9a12594ff
-
SHA256
55b5efe0a09cb5cb79308874e2e5d25c895f995754bbf960ce9a403207ce3abd
-
SHA512
58c9e62bc32376773a9bb1f266aab617ad2098f2d12b13fba1bfcefdf3edd1f44682c791567cc67035550b80b735ae460111145fd1b9d733325cda9dfbe61849
-
SSDEEP
384:a1vknrDG5kbu+MyKCduqwYjrVCSvuC+s6ZxMuzB9uzwVkOLyeKKIyYCiJo9BkzH6:CvO+CnMyKirwkuC+s6ZxPzB9nkZM/Bku
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Plugins\HBrowser.dll,#11⤵PID:1876
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4160 --field-trial-handle=3084,i,4016110471176367543,14287608422419064331,262144 --variations-seed-version /prefetch:81⤵PID:4100