Overview
overview
3Static
static
3KRNLWRD.rar
windows7-x64
3KRNLWRD.rar
windows10-2004-x64
3KRNLWRD/Bu....3.dll
windows7-x64
1KRNLWRD/Bu....3.dll
windows10-2004-x64
1KRNLWRD/Sc...ET.dll
windows7-x64
1KRNLWRD/Sc...ET.dll
windows10-2004-x64
1KRNLWRD/autoexec.lnk
windows7-x64
3KRNLWRD/autoexec.lnk
windows10-2004-x64
3KRNLWRD/injector.dll
windows7-x64
1KRNLWRD/injector.dll
windows10-2004-x64
1KRNLWRD/krnl.dll
windows7-x64
1KRNLWRD/krnl.dll
windows10-2004-x64
3KRNLWRD/krnl.exe
windows7-x64
3KRNLWRD/krnl.exe
windows10-2004-x64
1KRNLWRD/kr...xe.xml
windows7-x64
1KRNLWRD/kr...xe.xml
windows10-2004-x64
1KRNLWRD/workspace.lnk
windows7-x64
3KRNLWRD/workspace.lnk
windows10-2004-x64
3Analysis
-
max time kernel
51s -
max time network
56s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
10-06-2024 18:11
Static task
static1
Behavioral task
behavioral1
Sample
KRNLWRD.rar
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
KRNLWRD.rar
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
KRNLWRD/Bunifu_UI_v1.5.3.dll
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
KRNLWRD/Bunifu_UI_v1.5.3.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
KRNLWRD/ScintillaNET.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
KRNLWRD/ScintillaNET.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
KRNLWRD/autoexec.lnk
Resource
win7-20240419-en
Behavioral task
behavioral8
Sample
KRNLWRD/autoexec.lnk
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
KRNLWRD/injector.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
KRNLWRD/injector.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
KRNLWRD/krnl.dll
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
KRNLWRD/krnl.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
KRNLWRD/krnl.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
KRNLWRD/krnl.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
KRNLWRD/krnlss.exe.xml
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
KRNLWRD/krnlss.exe.xml
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
KRNLWRD/workspace.lnk
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
KRNLWRD/workspace.lnk
Resource
win10v2004-20240508-en
General
-
Target
KRNLWRD/krnl.exe
-
Size
1.2MB
-
MD5
fb3a52d1045b1a0298668f2d77680306
-
SHA1
e16d5085977f1b895b7b2a046570b2da474add86
-
SHA256
8869c44219364f911548cb18da0cc6413b3277d3a8a8df18d0a521b558830d6e
-
SHA512
e19ce4c86ef8bf2ab25b4da67bf83acef5a8e688abfd3f96e8dec8169ce410c833df7685b6fb0b7489cf90ca51c56cd7264e8b2a94865aea5e5dacd4c5b7f44f
-
SSDEEP
12288:LMqP5hP0pwI7+G70EE/0GGGGGGhGGGGxdoM43nwVkokbtkK:LZEpRC4ysGGGGGGhGGGGx1Vpstz
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\KRNLWRD\krnl.exe"C:\Users\Admin\AppData\Local\Temp\KRNLWRD\krnl.exe"1⤵PID:4904
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3804,i,15140928051103392835,1612840580898364401,262144 --variations-seed-version --mojo-platform-channel-handle=4120 /prefetch:81⤵PID:1996