Overview
overview
7Static
static
3System.CodeDom.dll
windows10-2004-x64
1System.CodeDom.dll
windows11-ltsc_2024-x64
1System.Management.dll
windows10-2004-x64
1System.Management.dll
windows11-ltsc_2024-x64
1bunnysense v2.exe
windows10-2004-x64
1bunnysense v2.exe
windows11-ltsc_2024-x64
1bunnysense v2.exe
windows10-2004-x64
7bunnysense v2.exe
windows11-ltsc_2024-x64
6runtimes/w...nt.dll
windows10-2004-x64
1runtimes/w...nt.dll
windows11-ltsc_2024-x64
1General
- Target bunnysense.v2.1.free.zip
- Size 303KB
- Sample260803-zzry3axhmd
- SHA256 5078c3ee3c08ba1bebd56275551cd14506f57b509026ea100e2c1a06a5bb107c
- MD5 f7f5602d9c2e5fbed1554569a290e5e2
- SHA1 f8042655c140537ab93ac17843fb8f01b26c3abf
- SHA512 932ad988992c8d47676070d4de673cfad6dd440f0709345f80a3ecddb07d88717fbc9e7aeaf669a91c9f2331d478521bc5da095b3a8ece339e1a2900c4af9f0a
- SSDEEP 6144:174sFShE+RnFhUviwNMgIi1YZm1lhX/iuGFpqSnnP2PO:17yrZFWv7qm3hvUqSnOG
- TLSH T183642362A6708846D5D23F34E4FF9846E879539420061B4ADB02255DBE8CDF41BFFBC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
System.CodeDom.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
System.CodeDom.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
System.Management.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
System.Management.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
bunnysense v2.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
bunnysense v2.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
bunnysense v2.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
bunnysense v2.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
runtimes/win/lib/net8.0/System.Management.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
runtimes/win/lib/net8.0/System.Management.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target System.CodeDom.dll
- Size 179KB
- SHA256 9a45a619ad9f203d1d3a002cc46f300ebfb2f29e06d6d2bdb3316c2db98ea6f0
- MD5 07f9059a7e4a50a77d92a58f333a4257
- SHA1 7ab71c626328f03a366c6abe79857eb25ba42f92
- SHA512 0b6148238c5c859e142ed276c7da5b728a66f55cb2473433341c19cafaa2f48d47cfc517ed372e83b87841f6a5970184e5b7ea3a9bc0b460f1d7844c8371837f
- SSDEEP 3072:ZguoL64ILt8TyvhrUkufnNdO5KUPSl4bru9RYSH+lVmh1KAw6:X4ISevhrRanNlsu9CSKQht
- TLSH T1BD043A64379C83B7DB6EA131E474065566FCA50E3282DB9F8D4264F55E23BC0FE20A72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target System.Management.dll
- Size 71KB
- SHA256 bdd46b95e0bf9eb050e13c04c49d3d503d8304ba90301d1c813a2bdab14af862
- MD5 f694b4daceb627adf62d777b4becf7c3
- SHA1 90b9fe1aee1841ac09587a1f3a024ed42089f0c5
- SHA512 072d94dd8e5372644454ed3850dee4b98d2c3fe05ac2bea29c37d80c4d870bc422b23e8d26af98a0bdef87fcd5b281390e9a7a94d6f3f61bfd36376d1f3b3b58
- SSDEEP 768:v/jDXm3gh3nbNhm/ICTVEfthoQcNkiSLJKdbJnH6DjuZ9zxD:v/XXmEnbNDuu2QcNxS9ylnoCzxD
- TLSH T1FC73B411EBE88779CBE70671B47083346E74B6C72D22DA4F291B221D193AFC04F65E66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target bunnysense v2.dll
- Size 55KB
- SHA256 3b003ba356fc16c282c0027dfcc3b1ca9e161036c0df35de8ae591706096d1e5
- MD5 2f65796f18bf94f4b255f28bdfd5bfe8
- SHA1 745e4e881c12e36a451926cc02c8ca1cbf835d56
- SHA512 3a78ea159f4f4988c738f1778cf63db5f34e5f2abc1547727021ddfa151fa8fcb96f7bfa96938a4d864cada938a6c6f6e457feba10a24e82eb7e05a69c6714d9
- SSDEEP 1536:9HU192TgftF+obghFcx1DeYjpZ/Y6/RJG1YU:9HEJfeo0hEc
- TLSH T1C9434B8837B90533C3BF0BFC686695015F717E365562CB9D1E8E28FC2C913861652BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target bunnysense v2.exe
- Size 148KB
- SHA256 e8c0fa3697c1ad54e47bd36e96772774e1fbd6c2735f9b635953493a594b899a
- MD5 afbb3da0fd402a9b8a25641a9e01dabb
- SHA1 319dff457bb8b7b810563f99f9fe7d7d51f4c46c
- SHA512 97f7ddbf7d38e9fadbc7410f28b4b132ade1e6fca6f9a9694f6b80d728883a54513fa672ddf1183214d7be7b1811f497882db60b53392ad8a33ff8e8d85f124d
- SSDEEP 1536:d9YXnq9YamgiYSoGR6Ok84vKqILjiCBs86QKLRwqzm4XxCY01NTZZ2bo+W26mvIj:sqvmgiYSoIk8uIHzlqRwa/YB26mvIgo
- TLSH T16FE34B07E2A851BEE1B7D679CD924C41FB7378194B71A7CF07504AB60E63AD0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target runtimes/win/lib/net8.0/System.Management.dll
- Size 306KB
- SHA256 aa5514f3cad7058a1ac52f816636e199f1d19822d9ad29cfcdfead8e2a46bdbe
- MD5 e3f3d553a72f9efa52394e32f8d5cbf5
- SHA1 6964d5d2221dde2b2004b3229ec10c2f2a4d3d23
- SHA512 f19e4d9198059f87d547524cd5ab8721a5ac122400e9a6add007b3551d48bf5bc0c75a13409b2d0d32d08e60597b02094c215a3a0e4d5e1984fee2b7a1648e0a
- SSDEEP 6144:tKk+PHI08vB/RqQblb0BSTxCwv5ih79wq23kxpxuqI:tf+PHI08v9RqQblb0BK15iZHTxpdI
- TLSH T19464061033FC5654E5BF4FBAA1742064CFB9BB932E5EDB4D1C01A8CE18A1B909623767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10