Overview
overview
10Static
static
10Bunifu.UI.....3.dll
windows10-2004-x64
1DrakeUI.Framework.dll
windows10-2004-x64
1GeoIPCitys.dll
windows10-2004-x64
1Guna.UI2.dll
windows10-2004-x64
1KeyAuthPatchDll.dll
windows10-2004-x64
1LiveCharts.MAPS.dll
windows10-2004-x64
1LiveCharts...ms.dll
windows10-2004-x64
1LiveCharts.Wpf.dll
windows10-2004-x64
1LiveCharts.dll
windows10-2004-x64
1MetroFramework.dll
windows10-2004-x64
1MetroSet UI.dll
windows10-2004-x64
1NAudio.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1SPYdroiedVIP.exe
windows10-2004-x64
10SipaaFramework.dll
windows10-2004-x64
1Siticone.D...UI.dll
windows10-2004-x64
1System.IO....le.dll
windows10-2004-x64
1WinMM.Net.dll
windows10-2004-x64
1Analysis
-
max time kernel
45s -
max time network
52s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
13-08-2024 07:50
Behavioral task
behavioral1
Sample
Bunifu.UI.WinForms.1.5.3.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
DrakeUI.Framework.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
GeoIPCitys.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
Guna.UI2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
KeyAuthPatchDll.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
LiveCharts.MAPS.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
LiveCharts.WinForms.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral8
Sample
LiveCharts.Wpf.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
LiveCharts.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
MetroFramework.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
MetroSet UI.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral12
Sample
NAudio.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral14
Sample
SPYdroiedVIP.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
SipaaFramework.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral16
Sample
Siticone.Desktop.UI.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
System.IO.Compression.ZipFile.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral18
Sample
WinMM.Net.dll
Resource
win10v2004-20240802-en
General
-
Target
LiveCharts.Wpf.dll
-
Size
212KB
-
MD5
e924f79f0b5f3e79c98477d75831813d
-
SHA1
64f71e20e1953b13c771d8a8e63549ad6d64216e
-
SHA256
1bdbb1b5c1a50653e5c26161e9b7c03edc518721a6e10ea180a84049d967106b
-
SHA512
063e9bdbdaf0accb46cef5fdb98b30a97b8a6ba097a80d43a9799ff73e820d1c56d41ca9f71d94497736e3def7fbd0109db4000ab1d9e46cdc96357bf3e15fd1
-
SSDEEP
6144:d/vd0eaDQcUc0GkiTV3bkACA3AloBtefVt+aA2xgKPo1zlW1w:vaErjGkiTV3bkACA3AloBtefVt+aAGBF
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\LiveCharts.Wpf.dll,#11⤵PID:3468
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4380,i,2904906934812054273,11716976550456127484,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:81⤵PID:2768