General

  • Target

    KRLN.zip

  • Size

    134.0MB

  • MD5

    7bade8ca194f97869952c255d2855fc2

  • SHA1

    27bee4ce4c6ab683c43a0e4a0d5c7fd1c3275795

  • SHA256

    9c0e95c7c80f6c07ea48109802a28bc9c3adfbcf7ed99018b21c2b3290f285ba

  • SHA512

    4d72366fa60448414e6913c95758eecf29139b4892bab120e0dc6a5ef757ea2354709c3c2ef56da2db9a58587830994720798cc0ea41d823a5fff58f66259518

  • SSDEEP

    3145728:9Cph3Ws5SreKODzkeICJcg//E/6YWLvVPGiFDYaScxVrlp/kC3slz:9CpD5SCMOagkiYWQiF0aScxVnF3A

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

Files

  • KRLN.zip
    .zip
  • KRLN/Bunifu_UI_v1.5.3.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • KRLN/CefSharp.BrowserSubprocess.Core.dll
    .dll windows:6 windows x64 arch:x64

    fd8d83265d1d098a7029c549d9d26673


    Headers

    Imports

    Exports

    Sections

  • KRLN/CefSharp.BrowserSubprocess.Core.pdb
  • KRLN/CefSharp.BrowserSubprocess.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • KRLN/CefSharp.Core.Runtime.dll
    .dll windows:6 windows x64 arch:x64

    a0ee40bf96c6cc4f0b96ad521dd2ed59


    Headers

    Imports

    Exports

    Sections

  • KRLN/CefSharp.Core.Runtime.xml
    .js .xml polyglot
  • KRLN/CefSharp.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • KRLN/CefSharp.Core.xml
    .js .xml polyglot
  • KRLN/CefSharp.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • KRLN/CefSharp.WinForms.xml
    .xml
  • KRLN/CefSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • KRLN/CefSharp.xml
    .xml
  • KRLN/KRLN.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • KRLN/KRLN.exe.Config
    .xml
  • KRLN/VisualStudioTabControl.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • KRLN/bin/Monaco/Monaco.html
    .js
  • KRLN/bin/Monaco/vs/base/worker/workerMain.js
    .js
  • KRLN/bin/Monaco/vs/basic-languages/lua/lua.js
  • KRLN/bin/Monaco/vs/editor/contrib/suggest/media/String_16x.svg
  • KRLN/bin/Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
  • KRLN/bin/Monaco/vs/editor/editor.main.css
  • KRLN/bin/Monaco/vs/editor/editor.main.js
    .js
  • KRLN/bin/Monaco/vs/editor/editor.main.nls.de.js
  • KRLN/bin/Monaco/vs/editor/editor.main.nls.es.js
  • KRLN/bin/Monaco/vs/editor/editor.main.nls.fr.js
  • KRLN/bin/Monaco/vs/editor/editor.main.nls.it.js
  • KRLN/bin/Monaco/vs/editor/editor.main.nls.ja.js
  • KRLN/bin/Monaco/vs/editor/editor.main.nls.js
  • KRLN/bin/Monaco/vs/editor/editor.main.nls.ko.js
  • KRLN/bin/Monaco/vs/editor/editor.main.nls.ru.js
  • KRLN/bin/Monaco/vs/editor/editor.main.nls.zh-cn.js
  • KRLN/bin/Monaco/vs/editor/editor.main.nls.zh-tw.js
  • KRLN/bin/Monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
  • KRLN/bin/Monaco/vs/loader.js
    .js
  • KRLN/bin/Xeno.dll
    .dll windows:6 windows x64 arch:x64

    3a1f9d973bff43051a3daf411f707362


    Headers

    Imports

    Exports

    Sections

  • KRLN/bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • KRLN/bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • KRLN/bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • KRLN/bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections

  • KRLN/chrome_100_percent.pak
  • KRLN/chrome_200_percent.pak
  • KRLN/chrome_elf.dll
    .dll windows:10 windows x64 arch:x64

    810210b3b11890bee1090535e576e13f


    Headers

    Imports

    Exports

    Sections

  • KRLN/cxapis.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • KRLN/debug.log
  • KRLN/dxcompiler.dll
    .dll windows:10 windows x64 arch:x64

    ab3093cf1cff53f421cecf4eeee429f4


    Headers

    Imports

    Exports

    Sections

  • KRLN/dxil.dll
    .dll windows:10 windows x64 arch:x64

    42e0b0387affe2aaa84bcec72eb74baf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KRLN/icudtl.dat
  • KRLN/libcef.dll
    .dll windows:10 windows x64 arch:x64

    983a329c063b91ba6e14a0a66af41a47


    Headers

    Imports

    Exports

    Sections

  • KRLN/locales/af.pak
  • KRLN/locales/am.pak
  • KRLN/locales/ar.pak
  • KRLN/locales/bg.pak
  • KRLN/locales/bn.pak
  • KRLN/locales/ca.pak
  • KRLN/locales/cs.pak
  • KRLN/locales/da.pak
  • KRLN/locales/de.pak
  • KRLN/locales/el.pak
  • KRLN/locales/en-GB.pak
  • KRLN/locales/en-US.pak
  • KRLN/locales/es-419.pak
  • KRLN/locales/es.pak
  • KRLN/locales/et.pak
  • KRLN/locales/fa.pak
  • KRLN/locales/fi.pak
  • KRLN/locales/fil.pak
  • KRLN/locales/fr.pak
  • KRLN/locales/gu.pak
  • KRLN/locales/he.pak
  • KRLN/locales/hi.pak
  • KRLN/locales/hr.pak
  • KRLN/locales/hu.pak
  • KRLN/locales/id.pak
  • KRLN/locales/it.pak
  • KRLN/locales/ja.pak
  • KRLN/locales/kn.pak
  • KRLN/locales/ko.pak
  • KRLN/locales/lt.pak
  • KRLN/locales/lv.pak
  • KRLN/locales/ml.pak
  • KRLN/locales/mr.pak
  • KRLN/locales/ms.pak
  • KRLN/locales/nb.pak
  • KRLN/locales/nl.pak
  • KRLN/locales/pl.pak
  • KRLN/locales/pt-BR.pak
  • KRLN/locales/pt-PT.pak
  • KRLN/locales/ro.pak
  • KRLN/locales/ru.pak
  • KRLN/locales/sk.pak
  • KRLN/locales/sl.pak
  • KRLN/locales/sr.pak
  • KRLN/locales/sv.pak
  • KRLN/locales/sw.pak
  • KRLN/locales/ta.pak
  • KRLN/locales/te.pak
  • KRLN/locales/th.pak
  • KRLN/locales/tr.pak
  • KRLN/locales/uk.pak
  • KRLN/locales/ur.pak
  • KRLN/locales/vi.pak
  • KRLN/locales/zh-CN.pak
  • KRLN/locales/zh-TW.pak
  • KRLN/resources.pak
  • KRLN/snapshot_blob.bin
  • KRLN/v8_context_snapshot.bin