19bd57fa080deeb94b3b07325b0d45d0e1a5abde38c123010b5fd640504751e0 | Triage

Submit
Reports

Overview

overview

7

Static

static

3

KRNL Remak....3.dll

windows7-x64

1

KRNL Remak....3.dll

windows10-2004-x64

1

KRNL Remak...ox.dll

windows7-x64

1

KRNL Remak...ox.dll

windows10-2004-x64

1

KRNL Remak...I2.dll

windows7-x64

1

KRNL Remak...I2.dll

windows10-2004-x64

1

KRNL Remak...ke.exe

windows7-x64

6

KRNL Remak...ke.exe

windows10-2004-x64

7

KRNL Remak...es.dll

windows7-x64

1

KRNL Remak...es.dll

windows10-2004-x64

1

KRNL Remak...on.dll

windows7-x64

1

KRNL Remak...on.dll

windows10-2004-x64

1

KRNL Remak...rp.dll

windows7-x64

1

KRNL Remak...rp.dll

windows10-2004-x64

1

KRNL Remak...rs.dll

windows7-x64

1

KRNL Remak...rs.dll

windows10-2004-x64

1

KRNL Remak...om.dll

windows7-x64

1

KRNL Remak...om.dll

windows10-2004-x64

1

KRNL Remak...es.dll

windows7-x64

1

KRNL Remak...es.dll

windows10-2004-x64

1

KRNL Remak...ry.dll

windows7-x64

1

KRNL Remak...ry.dll

windows10-2004-x64

1

KRNL Remak...rs.dll

windows7-x64

1

KRNL Remak...rs.dll

windows10-2004-x64

1

KRNL Remak...fe.dll

windows7-x64

1

KRNL Remak...fe.dll

windows10-2004-x64

1

KRNL Remak...eb.dll

windows7-x64

1

KRNL Remak...eb.dll

windows10-2004-x64

1

KRNL Remak...on.dll

windows7-x64

1

KRNL Remak...on.dll

windows10-2004-x64

1

KRNL Remak...ns.dll

windows7-x64

1

KRNL Remak...ns.dll

windows10-2004-x64

1

Analysis

max time kernel
419s
max time network
424s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
19-01-2025 14:11

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

KRNL Remake/Bunifu_UI_v1.5.3.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral2

Sample

KRNL Remake/Bunifu_UI_v1.5.3.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral3

Sample

KRNL Remake/FastColoredTextBox.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral4

Sample

KRNL Remake/FastColoredTextBox.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral5

Sample

KRNL Remake/Guna.UI2.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral6

Sample

KRNL Remake/Guna.UI2.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral7

Sample

KRNL Remake/KRNL Remake.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

8 signatures

900 seconds

Behavioral task

behavioral8

Sample

KRNL Remake/KRNL Remake.exe

Resource

win10v2004-20241007-en

discovery persistence privilege_escalation

windows10-2004-x64

20 signatures

900 seconds

Behavioral task

behavioral9

Sample

KRNL Remake/Microsoft.Bcl.AsyncInterfaces.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral10

Sample

KRNL Remake/Microsoft.Bcl.AsyncInterfaces.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral11

Sample

KRNL Remake/Newtonsoft.Json.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral12

Sample

KRNL Remake/Newtonsoft.Json.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral13

Sample

KRNL Remake/RestSharp.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral14

Sample

KRNL Remake/RestSharp.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral15

Sample

KRNL Remake/System.Buffers.dll

Resource

win7-20241023-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral16

Sample

KRNL Remake/System.Buffers.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral17

Sample

KRNL Remake/System.CodeDom.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral18

Sample

KRNL Remake/System.CodeDom.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral19

Sample

KRNL Remake/System.IO.Pipelines.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral20

Sample

KRNL Remake/System.IO.Pipelines.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral21

Sample

KRNL Remake/System.Memory.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral22

Sample

KRNL Remake/System.Memory.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral23

Sample

KRNL Remake/System.Numerics.Vectors.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral24

Sample

KRNL Remake/System.Numerics.Vectors.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral25

Sample

KRNL Remake/System.Runtime.CompilerServices.Unsafe.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral26

Sample

KRNL Remake/System.Runtime.CompilerServices.Unsafe.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral27

Sample

KRNL Remake/System.Text.Encodings.Web.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral28

Sample

KRNL Remake/System.Text.Encodings.Web.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral29

Sample

KRNL Remake/System.Text.Json.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral30

Sample

KRNL Remake/System.Text.Json.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral31

Sample

KRNL Remake/System.Threading.Tasks.Extensions.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral32

Sample

KRNL Remake/System.Threading.Tasks.Extensions.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Report Analysis Logs

General

Target

KRNL Remake/System.Memory.dll
Size

141KB
MD5

35e6237ff5533342516bf01a46e4b7cd
SHA1

f8a118f07eea37ce732b487ab730646dedc46235
SHA256

b8fe216aff0f6d162f8eefe7be1712162b7d8199e20ce2e70ffac36c7ce20a4c
SHA512

dce731c61aea73d16813b0932d47ac94926d84d9077115ef147971b1e1c76a88e333ccd0f88b34fca9e2533f54c140947316fd63415199fe5f20a45cd0aef033
SSDEEP

3072:wPgSRYPuMbrhcabqwwwUtiPmu3XxNtvckP:2uPaaWwww7OuR4k

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\KRNL Remake\System.Memory.dll",#1
1⤵
PID:4480

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy