Overview

overview

7

Static

static

3

KRNLWRD/Bu....3.dll

windows7-x64

7

KRNLWRD/Bu....3.dll

windows10-2004-x64

1

KRNLWRD/Sc...ET.dll

windows7-x64

1

KRNLWRD/Sc...ET.dll

windows10-2004-x64

1

KRNLWRD/autoexec.lnk

windows7-x64

3

KRNLWRD/autoexec.lnk

windows10-2004-x64

3

KRNLWRD/injector.dll

windows7-x64

1

KRNLWRD/injector.dll

windows10-2004-x64

1

KRNLWRD/krnl.dll

windows7-x64

1

KRNLWRD/krnl.dll

windows10-2004-x64

3

KRNLWRD/krnl.exe

windows7-x64

3

KRNLWRD/krnl.exe

windows10-2004-x64

1

KRNLWRD/workspace.lnk

windows7-x64

3

KRNLWRD/workspace.lnk

windows10-2004-x64

3

Analysis

  • max time kernel
    235s
  • max time network
    253s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-05-2024 15:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    KRNLWRD/krnl.exe

  • Size

    1.2MB

  • MD5

    fb3a52d1045b1a0298668f2d77680306

  • SHA1

    e16d5085977f1b895b7b2a046570b2da474add86

  • SHA256

    8869c44219364f911548cb18da0cc6413b3277d3a8a8df18d0a521b558830d6e

  • SHA512

    e19ce4c86ef8bf2ab25b4da67bf83acef5a8e688abfd3f96e8dec8169ce410c833df7685b6fb0b7489cf90ca51c56cd7264e8b2a94865aea5e5dacd4c5b7f44f

  • SSDEEP

    12288:LMqP5hP0pwI7+G70EE/0GGGGGGhGGGGxdoM43nwVkokbtkK:LZEpRC4ysGGGGGGhGGGGx1Vpstz

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\KRNLWRD\krnl.exe
    "C:\Users\Admin\AppData\Local\Temp\KRNLWRD\krnl.exe"
    1⤵
      PID:660
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4404,i,1697479186275492802,18058102846092193784,262144 --variations-seed-version --mojo-platform-channel-handle=1284 /prefetch:8
      1⤵
        PID:3136

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/660-0-0x00000000750CE000-0x00000000750CF000-memory.dmp

        Filesize

        4KB

        Download

      • memory/660-1-0x0000000000030000-0x0000000000166000-memory.dmp

        Filesize

        1.2MB

        Download

      • memory/660-2-0x0000000005100000-0x00000000056A4000-memory.dmp

        Filesize

        5.6MB

        Download

      • memory/660-3-0x0000000004BF0000-0x0000000004C82000-memory.dmp

        Filesize

        584KB

        Download