bbfdb2bedf8b86153f608996a3f1bc41b5cf569d4393015dea8f015b4f32ec6f | Triage

Submit
Reports

Overview

overview

3

Static

static

3

1.9/Obf/Bu....3.dll

windows7-x64

1

1.9/Obf/Bu....3.dll

windows10-2004-x64

1

1.9/Obf/FlatUI.dll

windows7-x64

1

1.9/Obf/FlatUI.dll

windows10-2004-x64

1

1.9/Obf/Lo...xi.dll

windows7-x64

1

1.9/Obf/Lo...xi.dll

windows10-2004-x64

1

1.9/Obf/Mi...ns.dll

windows7-x64

1

1.9/Obf/Mi...ns.dll

windows10-2004-x64

1

1.9/Obf/Mi...ks.dll

windows7-x64

1

1.9/Obf/Mi...ks.dll

windows10-2004-x64

1

1.9/Obf/Ne...on.dll

windows7-x64

1

1.9/Obf/Ne...on.dll

windows10-2004-x64

1

1.9/Obf/SafeGuard.dll

windows7-x64

1

1.9/Obf/SafeGuard.dll

windows10-2004-x64

1

1.9/Obf/Stresser.exe

windows7-x64

3

1.9/Obf/Stresser.exe

windows10-2004-x64

3

1.9/Obf/Sy...ns.dll

windows7-x64

1

1.9/Obf/Sy...ns.dll

windows10-2004-x64

1

1.9/Obf/Sy...es.dll

windows7-x64

1

1.9/Obf/Sy...es.dll

windows10-2004-x64

1

1.9/Obf/Teen.dll

windows7-x64

1

1.9/Obf/Teen.dll

windows10-2004-x64

1

1.9/Obf/Up...rp.dll

windows7-x64

1

1.9/Obf/Up...rp.dll

windows10-2004-x64

1

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
18-10-2024 12:05

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

1.9/Obf/Bunifu_UI_v1.5.3.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

1.9/Obf/Bunifu_UI_v1.5.3.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

1.9/Obf/FlatUI.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

1.9/Obf/FlatUI.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

1.9/Obf/LogIn Theme Dll By xVenoxi.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

1.9/Obf/LogIn Theme Dll By xVenoxi.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

1.9/Obf/Microsoft.Threading.Tasks.Extensions.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

1.9/Obf/Microsoft.Threading.Tasks.Extensions.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

1.9/Obf/Microsoft.Threading.Tasks.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

1.9/Obf/Microsoft.Threading.Tasks.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

1.9/Obf/Newtonsoft.Json.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

1.9/Obf/Newtonsoft.Json.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

1.9/Obf/SafeGuard.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

1.9/Obf/SafeGuard.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

1.9/Obf/Stresser.exe

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

1.9/Obf/Stresser.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

1.9/Obf/System.Net.Http.Extensions.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

1.9/Obf/System.Net.Http.Extensions.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

1.9/Obf/System.Net.Http.Primitives.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

1.9/Obf/System.Net.Http.Primitives.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

1.9/Obf/Teen.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

1.9/Obf/Teen.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

1.9/Obf/UptimeSharp.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

1.9/Obf/UptimeSharp.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

1.9/Obf/SafeGuard.dll
Size

1.7MB
MD5

3307fc407d88ba40abeac87266f4558d
SHA1

3b85fc7ec65d4e26720516866e72b240598cedce
SHA256

b215110d42bdec6069d1328e429c959f68c1bee08333c4852bd3f5299b95173f
SHA512

df1f55b8cc0c275ac8a28364d0d5be5d775b9c237db632582e375ac18deb0de8855279d7e92e49ed4389aa694d1cfe0a878b90725d8353df6d6695433018c7d9
SSDEEP

24576:+M6ryfewjvR47825o3lYiXrVZ1Kpmboqpc7iPTQgO5F9f:sry2wNizQrVZ1Oyc7G3O5F

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1.9\Obf\SafeGuard.dll,#1
1⤵
PID:3392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy