fba509ba07a29466d86198a4294961965ad8ef384a62da72e5b01516694fbe43

Submit
Reports

Overview

overview

Static

static

WBNS X FNF...NF.exe

windows7-x64

WBNS X FNF...NF.exe

windows10-2004-x64

WBNS X FNF...lc.dll

windows7-x64

WBNS X FNF...lc.dll

windows10-2004-x64

WBNS X FNF...re.dll

windows7-x64

WBNS X FNF...re.dll

windows10-2004-x64

WBNS X FNF...me.dll

windows7-x64

WBNS X FNF...me.dll

windows10-2004-x64

WBNS X FNF...ion.js

windows7-x64

WBNS X FNF...ion.js

windows10-2004-x64

WBNS X FNF...ter.js

windows7-x64

WBNS X FNF...ter.js

windows10-2004-x64

WBNS X FNF...in.dll

windows7-x64

WBNS X FNF...in.dll

windows10-2004-x64

WBNS X FNF...in.dll

windows7-x64

WBNS X FNF...in.dll

windows10-2004-x64

WBNS X FNF...in.dll

windows7-x64

WBNS X FNF...in.dll

windows10-2004-x64

WBNS X FNF...in.dll

windows7-x64

WBNS X FNF...in.dll

windows10-2004-x64

WBNS X FNF...in.dll

windows7-x64

WBNS X FNF...in.dll

windows10-2004-x64

WBNS X FNF...in.dll

windows7-x64

WBNS X FNF...in.dll

windows10-2004-x64

WBNS X FNF...in.dll

windows7-x64

WBNS X FNF...in.dll

windows10-2004-x64

WBNS X FNF....2.jar

windows7-x64

WBNS X FNF....2.jar

windows10-2004-x64

WBNS X FNF....2.jar

windows7-x64

WBNS X FNF....2.jar

windows10-2004-x64

WBNS X FNF...in.dll

windows7-x64

WBNS X FNF...in.dll

windows10-2004-x64

Analysis

max time kernel
142s
max time network
139s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 01:01

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

WBNS X FNF V1/WBNS X FNF.exe

Resource

win7-20240221-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

WBNS X FNF V1/WBNS X FNF.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

WBNS X FNF V1/libvlc.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

WBNS X FNF V1/libvlc.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

WBNS X FNF V1/libvlccore.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

WBNS X FNF V1/libvlccore.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

WBNS X FNF V1/lime.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

WBNS X FNF V1/lime.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

WBNS X FNF V1/mods/All wbns/scripts/optimization.js

Resource

win7-20240508-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

WBNS X FNF V1/mods/All wbns/scripts/optimization.js

Resource

win10v2004-20240426-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

WBNS X FNF V1/mods/Unwebonable/extra_scripts/extraCharacter.js

Resource

win7-20240508-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

WBNS X FNF V1/mods/Unwebonable/extra_scripts/extraCharacter.js

Resource

win10v2004-20240426-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

WBNS X FNF V1/plugins/access/libaccess_concat_plugin.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

WBNS X FNF V1/plugins/access/libaccess_concat_plugin.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

WBNS X FNF V1/plugins/access/libaccess_imem_plugin.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

WBNS X FNF V1/plugins/access/libaccess_imem_plugin.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

WBNS X FNF V1/plugins/access/libaccess_mms_plugin.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

WBNS X FNF V1/plugins/access/libaccess_mms_plugin.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

WBNS X FNF V1/plugins/access/libaccess_realrtsp_plugin.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

WBNS X FNF V1/plugins/access/libaccess_realrtsp_plugin.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

WBNS X FNF V1/plugins/access/libaccess_srt_plugin.dll

Resource

win7-20240215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

WBNS X FNF V1/plugins/access/libaccess_srt_plugin.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

WBNS X FNF V1/plugins/access/libaccess_wasapi_plugin.dll

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

WBNS X FNF V1/plugins/access/libaccess_wasapi_plugin.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

WBNS X FNF V1/plugins/access/libattachment_plugin.dll

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

WBNS X FNF V1/plugins/access/libattachment_plugin.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

WBNS X FNF V1/plugins/access/libbluray-awt-j2se-1.3.2.jar

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

WBNS X FNF V1/plugins/access/libbluray-awt-j2se-1.3.2.jar

Resource

win10v2004-20240508-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

WBNS X FNF V1/plugins/access/libbluray-j2se-1.3.2.jar

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

WBNS X FNF V1/plugins/access/libbluray-j2se-1.3.2.jar

Resource

win10v2004-20240226-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

WBNS X FNF V1/plugins/access/libcdda_plugin.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

WBNS X FNF V1/plugins/access/libcdda_plugin.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

WBNS X FNF V1/libvlccore.dll
Size

2.7MB
MD5

01f6f807faf190a38bded7bb1c105c18
SHA1

22c9fbe9a92be74fe857aaea020025a78c52365f
SHA256

1fed66191a0cda73b37ba2bc58f6ebad3ee1ec4f8193608f3ac1d8ad2b97640d
SHA512

e35201ce08d51cf3c7580ec390e4eee228dbe17b51ee0885f748a65f36f2bb6a1c4deee10ce9be92d6b6d58db8a59b8d1f93dc8108e9ae7ef0f059c62d2faee9
SSDEEP

49152:DA9qEelmNGJRcsADizpXtBOy+BAUZLY6sEZGaXBuQQ9eyr:+q8fW+BAUZL3e

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 308 wrote to memory of 2368	308	rundll32.exe	WerFault.exe
PID 308 wrote to memory of 2368	308	rundll32.exe	WerFault.exe
PID 308 wrote to memory of 2368	308	rundll32.exe	WerFault.exe

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\WBNS X FNF V1\libvlccore.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:308

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 308 -s 120
2⤵
PID:2368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/308-0-0x000007FEF5720000-0x000007FEF59D5000-memory.dmp

Filesize
2.7MB

Download