Overview
overview
3Static
static
3KRNL Remak....3.dll
windows7-x64
1KRNL Remak....3.dll
windows10-2004-x64
1KRNL Remak...ox.dll
windows7-x64
1KRNL Remak...ox.dll
windows10-2004-x64
1KRNL Remak...I2.dll
windows7-x64
1KRNL Remak...I2.dll
windows10-2004-x64
1KRNL Remak...ke.exe
windows7-x64
3KRNL Remak...ke.exe
windows10-2004-x64
3KRNL Remak...es.dll
windows7-x64
1KRNL Remak...es.dll
windows10-2004-x64
1KRNL Remak...on.dll
windows7-x64
1KRNL Remak...on.dll
windows10-2004-x64
1KRNL Remak...rp.dll
windows7-x64
1KRNL Remak...rp.dll
windows10-2004-x64
1KRNL Remak...rs.dll
windows7-x64
1KRNL Remak...rs.dll
windows10-2004-x64
1KRNL Remak...om.dll
windows7-x64
1KRNL Remak...om.dll
windows10-2004-x64
1KRNL Remak...es.dll
windows7-x64
1KRNL Remak...es.dll
windows10-2004-x64
1KRNL Remak...ry.dll
windows7-x64
1KRNL Remak...ry.dll
windows10-2004-x64
1KRNL Remak...rs.dll
windows7-x64
1KRNL Remak...rs.dll
windows10-2004-x64
1KRNL Remak...fe.dll
windows7-x64
1KRNL Remak...fe.dll
windows10-2004-x64
1KRNL Remak...eb.dll
windows7-x64
1KRNL Remak...eb.dll
windows10-2004-x64
1KRNL Remak...on.dll
windows7-x64
1KRNL Remak...on.dll
windows10-2004-x64
1KRNL Remak...ns.dll
windows7-x64
1KRNL Remak...ns.dll
windows10-2004-x64
1Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
19-01-2025 14:18
Static task
static1
Behavioral task
behavioral1
Sample
KRNL Remake/Bunifu_UI_v1.5.3.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
KRNL Remake/Bunifu_UI_v1.5.3.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
KRNL Remake/FastColoredTextBox.dll
Resource
win7-20241023-en
Behavioral task
behavioral4
Sample
KRNL Remake/FastColoredTextBox.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
KRNL Remake/Guna.UI2.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
KRNL Remake/Guna.UI2.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
KRNL Remake/KRNL Remake.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
KRNL Remake/KRNL Remake.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
KRNL Remake/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
KRNL Remake/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
KRNL Remake/Newtonsoft.Json.dll
Resource
win7-20241023-en
Behavioral task
behavioral12
Sample
KRNL Remake/Newtonsoft.Json.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
KRNL Remake/RestSharp.dll
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
KRNL Remake/RestSharp.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
KRNL Remake/System.Buffers.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
KRNL Remake/System.Buffers.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
KRNL Remake/System.CodeDom.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
KRNL Remake/System.CodeDom.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
KRNL Remake/System.IO.Pipelines.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
KRNL Remake/System.IO.Pipelines.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
KRNL Remake/System.Memory.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
KRNL Remake/System.Memory.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
KRNL Remake/System.Numerics.Vectors.dll
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
KRNL Remake/System.Numerics.Vectors.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
KRNL Remake/System.Runtime.CompilerServices.Unsafe.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
KRNL Remake/System.Runtime.CompilerServices.Unsafe.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
KRNL Remake/System.Text.Encodings.Web.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
KRNL Remake/System.Text.Encodings.Web.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
KRNL Remake/System.Text.Json.dll
Resource
win7-20241010-en
Behavioral task
behavioral30
Sample
KRNL Remake/System.Text.Json.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
KRNL Remake/System.Threading.Tasks.Extensions.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
KRNL Remake/System.Threading.Tasks.Extensions.dll
Resource
win10v2004-20241007-en
General
-
Target
KRNL Remake/KRNL Remake.exe
-
Size
3.5MB
-
MD5
eac81de18872f7b27bcd18701391d932
-
SHA1
43d16d2bc7c2da594f082cff18c8cb5988a815d4
-
SHA256
fd0db4e58b8a1fa05b8cb7f02d4bce5f3f5a6e9a28ef774dda7086b840cc72c3
-
SHA512
63158849d438da8b5b5b2addfb86705243147fe08e3ca81f9efad642ffaf483c50ac4e5886bf479c59ced068767d3cfdf7b5659aa4f3b050791171118f85642c
-
SSDEEP
49152:60N0fEE942x58snxIX5q9+/Cp9GLy8W4SVII2UR47Lr0F5SMI7:f0fl42Pbnxz9+6ue8xSVIIdWrYgMI7
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language KRNL Remake.exe