19bd57fa080deeb94b3b07325b0d45d0e1a5abde38c123010b5fd640504751e0 | Triage

Submit
Reports

Overview

overview

7

Static

static

3

KRNL Remak....3.dll

windows7-x64

1

KRNL Remak....3.dll

windows10-2004-x64

1

KRNL Remak...ox.dll

windows7-x64

1

KRNL Remak...ox.dll

windows10-2004-x64

1

KRNL Remak...I2.dll

windows7-x64

1

KRNL Remak...I2.dll

windows10-2004-x64

1

KRNL Remak...ke.exe

windows7-x64

6

KRNL Remak...ke.exe

windows10-2004-x64

7

KRNL Remak...es.dll

windows7-x64

1

KRNL Remak...es.dll

windows10-2004-x64

1

KRNL Remak...on.dll

windows7-x64

1

KRNL Remak...on.dll

windows10-2004-x64

1

KRNL Remak...rp.dll

windows7-x64

1

KRNL Remak...rp.dll

windows10-2004-x64

1

KRNL Remak...rs.dll

windows7-x64

1

KRNL Remak...rs.dll

windows10-2004-x64

1

KRNL Remak...om.dll

windows7-x64

1

KRNL Remak...om.dll

windows10-2004-x64

1

KRNL Remak...es.dll

windows7-x64

1

KRNL Remak...es.dll

windows10-2004-x64

1

KRNL Remak...ry.dll

windows7-x64

1

KRNL Remak...ry.dll

windows10-2004-x64

1

KRNL Remak...rs.dll

windows7-x64

1

KRNL Remak...rs.dll

windows10-2004-x64

1

KRNL Remak...fe.dll

windows7-x64

1

KRNL Remak...fe.dll

windows10-2004-x64

1

KRNL Remak...eb.dll

windows7-x64

1

KRNL Remak...eb.dll

windows10-2004-x64

1

KRNL Remak...on.dll

windows7-x64

1

KRNL Remak...on.dll

windows10-2004-x64

1

KRNL Remak...ns.dll

windows7-x64

1

KRNL Remak...ns.dll

windows10-2004-x64

1

Analysis

max time kernel
443s
max time network
444s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
19-01-2025 14:11

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

KRNL Remake/Bunifu_UI_v1.5.3.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral2

Sample

KRNL Remake/Bunifu_UI_v1.5.3.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral3

Sample

KRNL Remake/FastColoredTextBox.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral4

Sample

KRNL Remake/FastColoredTextBox.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral5

Sample

KRNL Remake/Guna.UI2.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral6

Sample

KRNL Remake/Guna.UI2.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral7

Sample

KRNL Remake/KRNL Remake.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

8 signatures

900 seconds

Behavioral task

behavioral8

Sample

KRNL Remake/KRNL Remake.exe

Resource

win10v2004-20241007-en

discovery persistence privilege_escalation

windows10-2004-x64

20 signatures

900 seconds

Behavioral task

behavioral9

Sample

KRNL Remake/Microsoft.Bcl.AsyncInterfaces.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral10

Sample

KRNL Remake/Microsoft.Bcl.AsyncInterfaces.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral11

Sample

KRNL Remake/Newtonsoft.Json.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral12

Sample

KRNL Remake/Newtonsoft.Json.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral13

Sample

KRNL Remake/RestSharp.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral14

Sample

KRNL Remake/RestSharp.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral15

Sample

KRNL Remake/System.Buffers.dll

Resource

win7-20241023-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral16

Sample

KRNL Remake/System.Buffers.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral17

Sample

KRNL Remake/System.CodeDom.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral18

Sample

KRNL Remake/System.CodeDom.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral19

Sample

KRNL Remake/System.IO.Pipelines.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral20

Sample

KRNL Remake/System.IO.Pipelines.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral21

Sample

KRNL Remake/System.Memory.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral22

Sample

KRNL Remake/System.Memory.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral23

Sample

KRNL Remake/System.Numerics.Vectors.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral24

Sample

KRNL Remake/System.Numerics.Vectors.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral25

Sample

KRNL Remake/System.Runtime.CompilerServices.Unsafe.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral26

Sample

KRNL Remake/System.Runtime.CompilerServices.Unsafe.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral27

Sample

KRNL Remake/System.Text.Encodings.Web.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral28

Sample

KRNL Remake/System.Text.Encodings.Web.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral29

Sample

KRNL Remake/System.Text.Json.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral30

Sample

KRNL Remake/System.Text.Json.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral31

Sample

KRNL Remake/System.Threading.Tasks.Extensions.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

900 seconds

Behavioral task

behavioral32

Sample

KRNL Remake/System.Threading.Tasks.Extensions.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

900 seconds

Report Analysis Logs

General

Target

KRNL Remake/System.Text.Encodings.Web.dll
Size

77KB
MD5

56a2b64c40502852dacef02240ad46bc
SHA1

4019d0f80c83dedfea9820f91650bfae817451ba
SHA256

ad6be4be7e0183f3eabac3f747b834c557156942c7d2ce12039477ad0874fbfb
SHA512

19c5fa4a067332268b9043ee57c6e66a8692ee0d16d1c82d08de68eecca327886aaa2c69f179d60b1818acf079aecf961f6feea0234dbf4a75ab51f008b34490
SSDEEP

1536:uOOUnOOOc++v9mBkdQ3IWIxL1HFkzoA4Vnrpwp77ojJjn7NoWgzInv:c+FmCQ3I077oljRoTEnv

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\KRNL Remake\System.Text.Encodings.Web.dll",#1
1⤵
PID:2196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy