Overview

overview

10

Static

static

10

Guna.UI2.dll

windows10-1703-x64

1

Guna.UI2.dll

windows10-2004-x64

1

Guna.UI2.dll

windows11-21h2-x64

1

PandorahVNC.exe

windows10-1703-x64

7

PandorahVNC.exe

windows10-2004-x64

7

PandorahVNC.exe

windows11-21h2-x64

7

client.exe

windows10-1703-x64

10

client.exe

windows10-2004-x64

10

client.exe

windows11-21h2-x64

10

dnlib.dll

windows10-1703-x64

1

dnlib.dll

windows10-2004-x64

1

dnlib.dll

windows11-21h2-x64

1

Analysis

  • max time kernel
    1793s
  • max time network
    1802s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-06-2024 00:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    dnlib.dll

  • Size

    1.1MB

  • MD5

    e517eaeabd955f1e0f83ed04a0e6dd86

  • SHA1

    4a376b09ca00c7b934f6b444302773d0420ebd85

  • SHA256

    d04369e2fafabb36fdc31fc63b9a4bfd2bba577a203ee8180f9b084d9b344676

  • SHA512

    3c416235e0bb395b000b75f1358bde869c0ba2ff554b64821f5729f0580349fd8d1ba99ebc80e4b6dffa7b4741b4bb45570781d568fa9f5e3272de5d9108fe6c

  • SSDEEP

    24576:qM8euVMm3NxPkVCHKJi9n/PfuMs31MkZxxYyULZ4GBXcO1QmPyu9IFCh2v1DZS31:vhbivwS2IPx+vn

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\dnlib.dll,#1
    1⤵
      PID:3452
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1416 --field-trial-handle=3240,i,13319578961094268484,16557498665191861597,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:3752
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3356 --field-trial-handle=3240,i,13319578961094268484,16557498665191861597,262144 --variations-seed-version /prefetch:8
        1⤵
          PID:2264

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads