Overview
overview
10Static
static
10TeamzPAZ/B....3.dll
windows7-x64
1TeamzPAZ/B....3.dll
windows10-2004-x64
1TeamzPAZ/F...AZ.exe
windows7-x64
10TeamzPAZ/F...AZ.exe
windows10-2004-x64
10TeamzPAZ/H...ck.dll
windows7-x64
1TeamzPAZ/H...ck.dll
windows10-2004-x64
1TeamzPAZ/MailKit.dll
windows7-x64
1TeamzPAZ/MailKit.dll
windows10-2004-x64
1TeamzPAZ/N...on.dll
windows7-x64
1TeamzPAZ/N...on.dll
windows10-2004-x64
1TeamzPAZ/xNet.dll
windows7-x64
1TeamzPAZ/xNet.dll
windows10-2004-x64
1Analysis
-
max time kernel
125s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
17-06-2024 17:48
Behavioral task
behavioral1
Sample
TeamzPAZ/Bunifu_UI_v1.5.3.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
TeamzPAZ/Bunifu_UI_v1.5.3.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
TeamzPAZ/Fortnite Checker TeamzPAZ.exe
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
TeamzPAZ/Fortnite Checker TeamzPAZ.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
TeamzPAZ/HtmlAgilityPack.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
TeamzPAZ/HtmlAgilityPack.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
TeamzPAZ/MailKit.dll
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
TeamzPAZ/MailKit.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
TeamzPAZ/Newtonsoft.Json.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
TeamzPAZ/Newtonsoft.Json.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
TeamzPAZ/xNet.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
TeamzPAZ/xNet.dll
Resource
win10v2004-20240508-en
General
-
Target
TeamzPAZ/HtmlAgilityPack.dll
-
Size
113KB
-
MD5
45223650cff5e89e56c1bdd4cb7fb786
-
SHA1
110bee36ca7afc5fe404b82d5fed5de482758cd2
-
SHA256
8019602af8f267c4e09489b3d80b514b2498a495d0fa3d7d74c2eb86b1e25781
-
SHA512
23d75f48b21b08650d081a6b081efc35d0ec4132f9400537e1813dd53fa0a51d735e8935b914ce7cdc38d271b08f1bd9585e346708cdedd42e2753202d6efb20
-
SSDEEP
1536:3trxCwY9I/QndjSOXAiW4XO2TSBVt4l6Y5lF4cglELWPGr1Y7KmYDw5yz8S:zQIInsOQWX+BVM6YycAww5K8S
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\TeamzPAZ\HtmlAgilityPack.dll,#11⤵PID:4856
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4080,i,1999448010053300448,1112699187621658374,262144 --variations-seed-version --mojo-platform-channel-handle=3976 /prefetch:81⤵PID:4688