890fd59af3370e2ce12e0d11916d1ad4ee9b9c267c434347dbed11e9572e8645

Sharing

Copy URL Twitter E-mail

General

Target
Mercurial.exe
Size 3.2MB
Sample260824-ppaa6axfna
SHA256 890fd59af3370e2ce12e0d11916d1ad4ee9b9c267c434347dbed11e9572e8645
MD5 a9477b3e21018b96fc5d2264d4016e65
SHA1 493fa8da8bf89ea773aeb282215f78219a5401b7
SHA512 66529a656865400fe37d40ae125a1d057f8be5aa17da80d367ebbe1a9dcea38f5174870d0dc5b56771f6ca5a13e2fad22d803f5357f3ef59a46e3bdf0cc5ee9c
SSDEEP 98304:5kjozJ9/im8XVBKl6t1buVfRhq+5tXzgCa/T:lzJpjS346t1bIfuq07
TLSH
T107F512103625490EEE7641B42966858CC7722F271790D6AC3F8D3D8B7FF27F44621AAB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Mercurial.exe
- Size 3.2MB
- SHA256 890fd59af3370e2ce12e0d11916d1ad4ee9b9c267c434347dbed11e9572e8645
- MD5 a9477b3e21018b96fc5d2264d4016e65
- SHA1 493fa8da8bf89ea773aeb282215f78219a5401b7
- SHA512 66529a656865400fe37d40ae125a1d057f8be5aa17da80d367ebbe1a9dcea38f5174870d0dc5b56771f6ca5a13e2fad22d803f5357f3ef59a46e3bdf0cc5ee9c
- SSDEEP 98304:5kjozJ9/im8XVBKl6t1buVfRhq+5tXzgCa/T:lzJpjS346t1bIfuq07
- TLSH
  T107F512103625490EEE7641B42966858CC7722F271790D6AC3F8D3D8B7FF27F44621AAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

agilenet discovery
- Obfuscated with Agile.Net obfuscator
  Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
  agilenet
behavioral1
- Target
  bunifu.ui.winforms.bunifucolortransition.dll
- Size 38KB
- SHA256 b8071aab0f5c5ad71b13c460f8ab7884bb57e2d9385a2f849f96f7f4d5ef4a63
- MD5 e90d2078c978bdb81c154ee0251a02dc
- SHA1 768b7a3e0b5a38094a331a7b1efa2055f771def6
- SHA512 e29ccb7ee6dad4c9d3b7dc769f3b59c904cab19531c56b3329caaacca1f05e4937605c82fcc35203dccd97afd08aa9eb3e1ab8f7da4084eae833c40607d8efc8
- SSDEEP 768:A1SI0qVnh3l0iAzNIe5MqCU6UcSYbc3HhQTiYcz:QL0qVh3l5+6e5MqClUPdiTC
- TLSH
  T1E1033AD262D01E63C79706F828B093165BB4FAE37971E357EC0C80854A933FA5DD92DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  bunifu.ui.winforms.bunifudatagridview.dll
- Size 83KB
- SHA256 0e94fdd7b4d858f9fdb88b32186c236015eb2dc34678f13a21b629a6b72e80a9
- MD5 41b8475091e675079c1d977a469149f0
- SHA1 9b5e470c79507d5153e08807df45238d624f3f7e
- SHA512 cb83fd5be7cfddd2a594e5c42be3134fb823df18c24105663454f5729b78618f85e90c2a86e51341311954818ef1c9e14bc2232c0da07530950984d64778fc9c
- SSDEEP 1536:OmIUeW4DmOKrgVQjrnlDpW8x+tuT0RtrKFTqAFZfB4TtZ:OmIUttg4DdEtkaJY4v
- TLSH
  T1B0834D8573D21F61CA6A0E7EA0F012112BF5E1835509D35ADEEEF4CA1672FE18186BC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  bunifu.ui.winforms.bunifudatepicker.dll
- Size 50KB
- SHA256 9f9c00f5a20ef144ff866d8b859b678075672ca0e9b843885bfe13ff3c31ceb6
- MD5 79323afdbb383e733a235d370fb7cad7
- SHA1 8d508e57f1effcebfbc18b503b921ff7f9f761a3
- SHA512 cdf07efb17f32df8ce363344ae7520f14b1a004d2b5b180377e4d17f23ada02f41dac090f6106e271aa1b8ac6a5dc267b2f9bb8247c7b41074462b5ebd732607
- SSDEEP 768:pMzE/MAk/x6X8Td1FC+huajREGm36s/ItAFeuRHONhlq9C2IE7W9YkDu129FQu0n:yEf/ITGOXWUXpxLusb5n8yVQTb
- TLSH
  T1C0334C7272BC5932C38F9B3D7560B302BA34FA423E62D756689D828C17D3BDA61C518D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  bunifu.ui.winforms.bunifudropdown.dll
- Size 50KB
- SHA256 36374786b8a841ec2ecf09638b2b7a3f3a59501c2b47adbf33c55c962e3d89fe
- MD5 f14f6fba431abfccc26ed21532a9d781
- SHA1 45c3a89f4c3176c9661ece2dabc63f40917664bd
- SHA512 f882de978fa32e39a1df0327c339d2bbcc4c6f9fb3b352160b27e5213c42de0ce7282a3fe157893048870d01d6d4183de829c240f406d8c9273ef2271a84e1a6
- SSDEEP 768:n7o0mqmxviVRz2CjsvU4OVZQF/8e5TIJgf3ZCTVzv/85WvLMF/2/TnhQTic:MSehIJg/ZUHKW4u7yTr
- TLSH
  T18D333B72B3A01BB6C75BCF3E38904106AA74FB62693FD3577D5C4268D2A3BDD0650286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  bunifu.ui.winforms.bunifuformdock.dll
- Size 102KB
- SHA256 33a42955652fbde0603a6eff02d3c517f06a0782ef6753c8ff3bdbd5c3d36897
- MD5 31ace2f3a92added042e78e225eb798b
- SHA1 3fd644685651af74d6404cf6dda25b245fac0aa4
- SHA512 921b338d7618f94bc660597faef756cece19e4728017bb93f16111005585a949379c1da31df5fd08b4bd121a1bc0d6857808b74e78b67fca295e7b79bae03057
- SSDEEP 1536:nxR3zqSLau8gqnZ9PxKu41IyoFb4SPu9LZX9LBuyexG6Zc//iTcI:nxFeSLau8gqnZ9PxKiyPBBHsjZQiB
- TLSH
  T13AA35A3D70F97EA1C35A377F909153113B3BEB507E62D70A988C80E96C827D648562EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  bunifu.ui.winforms.bunifugauge.dll
- Size 74KB
- SHA256 ca392423a7ed03ff78a43fd9c8e001a86e8994764da6ba0e31fe6800b8f09d96
- MD5 7561ba2626a0088b0f65d0b038f4d249
- SHA1 99d6f3a4ac9c58f9b1368a75d8396ae84ff8c1cf
- SHA512 de0a8bf27d84393f2b855b9bc1f0ad9165ed008c379b6812b0f5642f044a424fe3faba8293588da79c38f178aa5539dc1d0d405bb6a7d56655fc4f7143b416ae
- SSDEEP 768:cG60JCtc42n6ZPhlJC/R4dp5lWET3kfNzFqz6ZioXgDgmsFLG67JghQTi9m:cG3V6RoR6XlSRFA6wHDg9w6NrTX
- TLSH
  T197732A3171E91DA1CE4E0F35A140A2026F30A7C3393BDB65ACA983B647937EB46E51D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  bunifu.ui.winforms.bunifugradientpanel.dll
- Size 60KB
- SHA256 c69328389d67445c530fc8970ee93a3b6d3e6dd2d8a38aea773ce56216dd3291
- MD5 1c766a56a20acee3273e9f5d1997ead7
- SHA1 359d149bf67ae494da7f3807d16810f3a8d61dbf
- SHA512 cea436cce5c4edac188133519ab2591904c63d49e09261afa807b9a44fc439a7b10c38b4e6abb21adb7b7d2f82f7d2d0217214596a27686764a2f448e55d8c94
- SSDEEP 1536:y5iiUiiJiiJiieiKbwXy65d36OQir2xiTFD:y5iiUiiJiiJiieiKbMdBQDi1
- TLSH
  T123534C91F6D40DE1CF8F05396450D2016B38F6F3B85BDB4BBD9C41A68A837EA11C939A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  bunifu.ui.winforms.bunifugroupbox.dll
- Size 63KB
- SHA256 503118e0e3a7694edfc73589f6ace78fd82a2742f479a9cdd291522aa83a12b9
- MD5 bb340c805b718265d6f7f426aa11ca46
- SHA1 0d3c1843112aeeb2cf50561bdc6e15c5e1a7fd0a
- SHA512 859ae5bf2ada6620626990644ddb48e7d9c910f782fe2410c43164deb270774395757272e89bd5fb5d49b3ab8d6fa394b6affd2766b80ba44fbb4b7feff08873
- SSDEEP 1536:O1nQLtCbYy6QWge2NDv57/xKq6j9BI6t8XSTa:olbY7QWYtlkx+Sm
- TLSH
  T199534C7572EC5AB0CF5A86352CF1C2000FF0F9DB6965CB2BAD9D42950F963E600DA276
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  bunifu.ui.winforms.bunifuimagebutton.dll
- Size 154KB
- SHA256 ab4699b6eab28b57a89e3e24dbf7eebcba72a7eb7c66c730efcb10af02af261c
- MD5 2e05e2e6c2bf12f58d04d76f2059be69
- SHA1 12cfea2d7e46d00a482578429d59bf9d32d7559a
- SHA512 031ed67f3934f72c146c5ae5e6010e9060ca1cbcad1bb07f4573454e771ce27a27d7fed52e1d8a7cabe1571f41622954acd2f6454ef7c781463d4bba33c178c3
- SSDEEP 3072:uqY4tGLsTQ5J19lynlDWGP9R7VOyFS7rsBsNGITDNYagbpnrYQ:hGLsTs1HulDdP3V/6JMITDNYaCz
- TLSH
  T18AF36D3DF2B5BDB1C34AF63A3824D1004F35EC98FD75E34FB84480AB69A1B5A4989953
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  bunifu.ui.winforms.bunifulabel.dll
- Size 420KB
- SHA256 5e264110aae5d5cd9cfcd1b5dcfdd863e0e4995c4e43282ab93ff4570f94f54e
- MD5 d69e598f39c1a4d13aeb50ce1e923bd4
- SHA1 2d5e83ff2acdaaf38011e33cd1d65fff2ec28a81
- SHA512 c56e306623ac370633dfeb854534644398ae59af24a72c12a48101dbac3b7bafe2dbdff1b73af003600e3b367d7cbda05784f1e97992553103ab5d1e57fb70f5
- SSDEEP 6144:5WV1a2qyWd9lzF0PKkwtM8y0+1xNsReJTsstEjNyESPLkDJweZsaAa:5WTI0SkwtM8y0+fUero7ya
- TLSH
  T16E942A58E5FD38E4E3BB47BAB05109C2C7ACD89369F5C75E884B68EC22B2F59C404356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  bunifu.ui.winforms.bunifupages.dll
- Size 96KB
- SHA256 bbbe29847083914daf70003e59a691abe9bcd50f0ba495801598e5fd2284bdb2
- MD5 bb4aeb3514c38a5c79781e5ba0c222ba
- SHA1 b94e26bb658c6ce0460d97a119c70ff7e1985be2
- SHA512 6eae4aac889ace8dde401fbe215c9e849ee20c1fcd367a2bb5338a2a48ea77fac4caf952f1d76a57ab100eaaeb3ebfcd1c25d6db53616f1dcd12bd93709dfa82
- SSDEEP 1536:0eqXRpvYO8IG9XjDmfxGl4ewTXMYTcHF/Bm+ws6wTjFrT3:oXDRO93mdewTXXcHZBHwSTjFrT
- TLSH
  T16BA31B3AB7B96E70CB4D763D657360000F30A4897C7DE36A9A94589CA9833D70D4A3B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  bunifu.ui.winforms.bunifupanel.dll
- Size 42KB
- SHA256 64f03ff7b4071142c72f44c65d435ab482f69ced2f68984b90a494232146a95a
- MD5 2c2134d4739fb3c005b1902284fe7e09
- SHA1 40695a4bd8c746a905b36ecfca2e08e3c0b08b69
- SHA512 5c1e707904b9a8e1d0595fca9eba62d8961029d5f39c4f4f1eddf74b2c313d67930301479ce842ef8e559ed58e6d4b92b05a46e4a7c7d5d365a5fec50540918c
- SSDEEP 768:M3VptbVL6xWNCLyBqyVozNRrrCZcZhQTi+B:GVvbl6xwoHNRr1UTb
- TLSH
  T1AF133DE1B1EC5EB0C78F163A66516EC28BF0BA827551D7139CBC81482A807FE11ED397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  bunifu.ui.winforms.bunifupicturebox.dll
- Size 36KB
- SHA256 ae9be004cf471b62a06ef0b50169c534af7e2e225adc7a40cc12b6ac04c1d40c
- MD5 60a5709643e8e5771489310b7e740459
- SHA1 1194c0c57557677d0b3ed95e06ebb03845f10f44
- SHA512 398e87872b6ce223670234fd093a4313eb55352c2e93d636358b01d46859c6d4cf0ae6e7ed5d089a543b96f180e24233b17186eb1e92a11b30e16accb164fcb5
- SSDEEP 768:C0dA2U61OTNU17DPzQ8f3DYO3qtuJDhQTib:Cp2910NURvQ28O3uG+TU
- TLSH
  T1E0F26B91BBE1DE71CB058E3E38B6A5064F71F682DD60CB37689D90081782BF911DE366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  bunifu.ui.winforms.bunifuprogressbar.dll
- Size 76KB
- SHA256 94fedf650ca50b13109a668acaa9495a858813ec8b1219ad1561491250b51081
- MD5 1a0a6b9dbb725e50b761b1d80a76deee
- SHA1 4e05394e81a0b8392892236987199a5893e479a9
- SHA512 21ea9d39712eb7ff5c79a55b8a4b04cbc3b505abc3e11f8ff656c9a85a6bdb4ef102304d7212b8e9cfc44c86220a98a80f5437af6b6c5b2dfff97b436cb26657
- SSDEEP 1536:KDVGrsP6FKzSxT1OwOOnfk3S5zXVemXXZ8rnTq:dI6FKz67fJleW4nO
- TLSH
  T169731A65F2E56FB2CB4F5375206061002F34E69AB96AD3DBAD9C426C07E2BE7018D1D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  bunifu.ui.winforms.bunifuradiobutton.dll
- Size 68KB
- SHA256 63f476c73e33dc793ae555bc6d53bfb677dc0515ceb3a3b66e91a54357c3869a
- MD5 176d76905ea895f0f25021f750e39bbd
- SHA1 869b71abea5e5b60aa288ba25986dd9c169038e3
- SHA512 1e5a2c581bfb578f4be2b8833b04452f59d4d7e4efa07c51029c37bcb6d8df59fba1bc18556a0b70e6e883492503be6f47bd4f093302f060d6063ce434026d81
- SSDEEP 768:NYEAuQ4zMMskJYW26dF1ADzVn8+2+J/fN4uc2ZBz6giZZbI4TW9+6nthQTis:cM1eQAvVnx2o6uc2Z16zZRI4qMoITf
- TLSH
  T1F4634A75F5A51EE0CA9E4A352590A103A738FE93FD1AD716AC8C42DA0BF33EA40C51D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  bunifu.ui.winforms.bunifurating.dll
- Size 49KB
- SHA256 99d9029fa5eca0d007c3c434a95b7c1a0ba53438bb108aa9ab22ed64141fee1f
- MD5 9b9dd4d2f64ec45f454775957d93a0da
- SHA1 1863cb630eaa7aa13bd350d9072424da2c2a1c37
- SHA512 eba50f6f4a9aded6280e4aeeb4e767e801428fb1e18216fc86e61cc453c0eabe9aa306780ba1ebb39fa3af9f2f4dd1f3bfd38742b0e16218a4d6480a34b9d2cd
- SSDEEP 768:KVJRSCf0Ts08A7NEqf0Mv4FJgzNpB9QXS5ke5nshQTi4k7:wRSCcTs084H0MvjNpB9QXwkepXThY
- TLSH
  T11E334BB1B6F77E72C71B8236A9C081020B75E243BA6EE713EE6D02584183BED35D14D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  bunifu.ui.winforms.bunifuscrollbar.dll
- Size 178KB
- SHA256 43b1eadf4fa34bd6ec3c95b65f7072bd8552407b8880a7106a5dc4415aad3f93
- MD5 744b40f2e054431729686e92edf23b78
- SHA1 c4c20324118a0dfd634ace43f37ce45755297fff
- SHA512 c8167d5611abbfecd2d3ab5edf0e9c82b1a1c3c0f0bfec135fb0363c1bd034cef07d568c5ff65311dd3d5353f8fcba1091c82d98127527c934b38fc492431c3b
- SSDEEP 3072:Et32SxlcotZU64AdCR0WcS3oHRoys4I+i5flfvCYPBeK5cnDVV9t/AsuX:EtG3bnZcjZs4I+i5f1vCYPBeQcLLIHX
- TLSH
  T17704F6A9E0DA5E71C74B4A3BFCC432242738BCD07915E31EC9C525E907D27767A8909B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  bunifu.ui.winforms.bunifuseparator.dll
- Size 37KB
- SHA256 3444b20e573d74480a91ae473ab48757ce1ec822b52b5b73d0785df6f9d213ef
- MD5 30fe63bf28402ce5e353fb02acfe87f3
- SHA1 cd38d459addb20e1c4bb55558ef3105583b1acb4
- SHA512 cfcee72639154a9289cc244aa68d0c548971383edf5a4c823e5a5e4c23af12aa6da8eb1056daf070b9da8291e49905962870b1516cd8e6b7d86305b01b60be94
- SSDEEP 768:gAz2tDNH8FOXAJyr09GvYBqjs1+Hw5ibkt2fIxaTclu3gpSLUdWURkPGxnkwzWzL:P6N0gGthWzWMJmTQj
- TLSH
  T19D0318A175E09FB2CBEB5E7535A0A3018F30F123F9B2E767959D800616C23D50EEE54A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  bunifu.ui.winforms.bunifushadowpanel.dll
- Size 45KB
- SHA256 4aadf6b3ff9c92ba8d843cd4770d71ddc7ba4c18271d55fd463918000ded3d2f
- MD5 3e31f265a52ad37291c4fd0e551efbf2
- SHA1 1774019157fea0589a2233fc168f9d19f01f2586
- SHA512 05c6c21b0f02e7477094b982737c3f73c0b7325bd59aaf5e063dfadaf44f18d456dc09078a7a11ed436cf87695fbb084b99ebafef88cf16862478eb95d44051a
- SSDEEP 768:++7ABwmUy6fRXLvdzPfkCU+xWfQRbWYg33gn1GzsQOmDElt/WzOxhQTiWkt:++7ABwmUy6fRXLvdbfkx+BWYe3gn1csN
- TLSH
  T183234BD371D08EA2CBAF0A37A8A0A1030B7BF7F25D5AD323658D425163523DA39F61D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  bunifu.ui.winforms.bunifushapes.dll
- Size 41KB
- SHA256 50a61b3579856ffd5dce20675fa508179d63e51c93a62a0e571107d0921e0f59
- MD5 2bce2054f4605798115f670feccf3494
- SHA1 2e8cda510bd1ce577ad05fc547af6e0d515bb658
- SHA512 a3035c23216be1843f8ab2486bf75612c7e1be1618eda5a74b409d325ec3ed3a8e88cef80e2d8a89830bd177ceb5d018b2c781e38238c156ce4dd03c9c4edfdc
- SSDEEP 768:lcRjQdAepHnxwo63xiyTU4PzW2zyKSWhQTiB:W0AQHxwo8vUSW2zyZ5Tq
- TLSH
  T131133B95B3B85FA1C39E0B3A35B0A2014F31F8873962D71B194C01641BD67D71EEEEA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  bunifu.ui.winforms.bunifuslider.dll
- Size 196KB
- SHA256 97d261b06d9b4aa4cbb2c207c1decc4f07d94f741177f0fa7bb4826106c4ddcc
- MD5 28f08e3a315f09895b3b9a785277f8bc
- SHA1 3ae2d243ab30b15117bda6b7a790d6e8fb4a95ac
- SHA512 a255853c0060692cae28de27aab3fa130e65049237822f5a1d0e2ea752d33fade97145c44d075a87d8b85075ad168d25381af6da4681133b79dcea317f8ee89c
- SSDEEP 3072:Q7kPNq0u+LyrPS2YGAAmsV6vD5b1iUBa48Mz8d8EZ+0FiBSIqb+QLBwasprWubnU:BAAf0ga48MwdMBSIqb+QBwa6nkSJOErK
- TLSH
  T1D4141A01E0EA5E76C34B573BF5802181FB789A103E4DDB19ED8A11E88FD37AEB54509B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  bunifu.ui.winforms.bunifusnackbar.dll
- Size 271KB
- SHA256 089a52b9b3f1b606f38a803e917d7a441a30d4cfdbf94efab236d08083152e7c
- MD5 17529c552ba7e83e509be2dd4564d0d3
- SHA1 71eefb1bf13a4a0929b3ecb24f37b3bb32faa639
- SHA512 f1f7f0f7b3ff7d7ad57641da3d0651ac21c17836a934d2220332b74b3e2e204e57765bdd64117c73d6ab9888b97fe38cb50188bce7a35be703edf8efce5d241c
- SSDEEP 6144:o01Ks5C85Zv4Kq0d2vMKQg6H3UsyA0TAsQVNVVIYzCnl:Cs5D5t2vMVXUjAseGYzCnl
- TLSH
  T1A1445B3972E82EA2CFBB0779B4481101ABF4D4917A5AC70DDD8401FC1A8A7F7E52925F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  bunifu.ui.winforms.bunifutextbox.dll
- Size 113KB
- SHA256 0326695b00374e58264acdea373ca1968f28d537a26e273cc571321371d0f9fa
- MD5 e97cbc255fa85a32df5eca153e999af6
- SHA1 225ea79d10f296db8d4a596d476617e9c2e79ba9
- SHA512 19714270ba658c122431718f141db3acec8e5d8b2cd8572bee53200e2648cc9e5d6d2d2e17f8ef17c2bf332a93bb1cab197281f0f3848ca6e5a3947be8f6c00a
- SSDEEP 1536:k8pH0vy/WUYbv2MUBbyXasyRuZJ7+sbxFcoxT5:k8pEyE+xQJRAoxF
- TLSH
  T1C6B32A3E72A91E63F78EFF77606042415334D8827F32D336E448459C2D92B9A1D6A1AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  bunifu.ui.winforms.bunifutoggleswitch.dll
- Size 45KB
- SHA256 0c61315f5c3762f5a284150795e7fdd2fc38b750fb154fe129435c7fc9823081
- MD5 b861c3e1bfccf1460b9c1e1b2150eeef
- SHA1 70f1f46822fcd09134f04b0b41f8efa2eaa9a97d
- SHA512 6b760b9952ef34c65f7b1eec505fd98becc4fb3f0d830e575bc0039ed2296950d1657826f8a123cebc2c87d5cc0e12414bfb5709425a7c9805038e2177b48f6a
- SSDEEP 768:ymNPqXKq8+nOerVPNnmyX1z5ZgrAJQcY5y2jhQTiU:bPqZ8+nDtrXp5yrymeTD
- TLSH
  T15D235BA1BD95EF72CB96473525F065025F70F5422662CFBB2EAE80840EC1FE105DA1BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  bunifu.ui.winforms.bunifutooltip.dll
- Size 520KB
- SHA256 4684180d1a26e47cb8e65b71fa310477191f2af1e63159a991b34909ef0c75d8
- MD5 68cd2cb55d93a38c6a5a51b1e26e5cc7
- SHA1 a6101dd2b8c103524a88fe9083d3cf8040bf2d34
- SHA512 70828f74ef02c60f75bf12e995b0f1ad9c9c3e3844c3089d83a9cb56926513a1825e3b82befa4d965a53698159cbf39dd319a672c4f6779f10126abde369af7c
- SSDEEP 6144:w6GwZUTIWGJp2wcgrpL66IFPSdfmgrCNu4O5/5FEEbtr0RjWFf:wyZE6p7BpL8FSdflr3/LEitr4jWFf
- TLSH
  T192B41815A1F59A70CBCA87759401C522BFB598717C6FD70FA88A10EC3592F6B43CAAC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  bunifu.ui.winforms.bunifutransition.dll
- Size 92KB
- SHA256 9430b815ac8be59e9b0837473267156fd180cf8b283623dc7a825ea362b07161
- MD5 a99b9964997e3d46eb630a043192fae7
- SHA1 51c889cfe16df123baa017edf8be8dbfba525ad9
- SHA512 e061b9c06c00a3a5524494e6a9cd9830d024df2594cea8a7cb16ed463d52968eb61ff2d82dd9102afbc0af203383bb3854a7e633eccc86f1a70f50d5c2197f9e
- SSDEEP 1536:zgHXj7nNTS93KR5lwP9ckc/hNqK8+j2KIScHodtuubnjrJT6:zg3jbqol1kcZd8fVScHStXHJe
- TLSH
  T15C93F87FE49BFF71C7AD36387852A6005332A88B3C75F35BA46450EAC6927460D8D1B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  bunifu.ui.winforms.bunifuusercontrol.dll
- Size 81KB
- SHA256 7de5b6716cc8e9fcc44f79afa44f01964491c6c534e540ac3717e64aa53728e6
- MD5 52818bde2085c626901e65247c0b9ba2
- SHA1 d8a18aa9a4f2ce53067c10627d8a112592951418
- SHA512 d0561cf63e78e79819a05c12c77835490372c0264f8f35502512571c14344867b2c5f61e7eec363cf6f3dd1485acddd115d1d43029021e194cc5d15bed3bbf9b
- SSDEEP 768:m4WHVlc+rqjXTyWI3B1VDpzfAaz/VoJB6s1PfNuR2RETiIBNzuddBqznXlaBtI2y:sVveGz/VoJQ0HS2iTDuddBigY2XKTldt
- TLSH
  T1B7832A1DF2B66EE1F3868235769079010739EBC2BA77D31ABE5C03A916D17DA018D273
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  bunifu.ui.winforms.deprecated.dll
- Size 152KB
- SHA256 d19a63326e0e0f6cea544a6603c3c069c8fe34222316215a877d2a979a15323f
- MD5 8096ee71cbd49df704b2beaa998dfb99
- SHA1 dbfbab5ddee3f624ddda1e6e3a01f08c16e232de
- SHA512 b89fad807762f913fd1b9a21578c1aa39bbdcd7341ce99d7e11af8c2d11d764426d61319f2ab5fed6de96d8860417a94a8cf148382c040397af550a15d014489
- SSDEEP 1536:kLCKq3P1nHrXPuM8F5h1XKflNpxsDTwVfMGm5JlOCTCazi/29/0jwC9UrK9DXHU4:leupxsgSGGJYCXzkICDX1OyhFB
- TLSH
  T18AE33B62FDA67D75C3CB4B3FE0D12105673AA8917A9AC30AC94501BD0FD3B5A314E29B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  costura.dll
- Size 4KB
- SHA256 ad9a110c8dad457c6f8fca566e88bc12b5eec24debee15d856920b569cf61700
- MD5 65700ff9c600ce4d2e89b8638513f725
- SHA1 790691b8e17be618abe2c596b93eb925fc4c1142
- SHA512 02ae13437374b91b1423c6375a8efcb2af2c330d8bb632bfc2f8a03c59c56e222ede20b7b2009d2ec7669efd470233511c63b68392fd7d1ae9c3bb3f7cb6c1a0
- SSDEEP 48:6R+lni2qJfjVRPGwzCU4MhTN0+19sETrpJyH4A9ZQWk1qyFV/2Iby:Dg7KSyE/yYjWg2
- TLSH
  T17B91721087A8473BEABB4BB6ACB313495375BA519D27CB2E1D8562166C123180A32B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  costura.pdb
- Size 2KB
- SHA256 e8887cf55207455c2873a5aa4ceb40be0d5c5e6308e9137067c4a9659facbf2f
- MD5 4194c1fdaa0a9bb0d1044a11f372cf95
- SHA1 52414ec411dea325110f0ad21378c8d101897989
- SHA512 198744f9fb597fdf4492abf191862d137741ba0b58dcbb89a0c3bfdf898831a8e0b4811faf65ab2524f0872ade1674209e5bdfd45d5f0f6a7d1af129f7e8e424
- TLSH
  T1095173771B40C295ED6880B20123DA58673147127742EE79EAE51709CCBFEF8077346B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31
- Target
  system.diagnostics.diagnosticsource.dll
- Size 34KB
- SHA256 d22133818a30313e0becf010d78a556a56b34ea361dbd33588c9817631fed540
- MD5 8d9df432109f1cfdd86723b5f171e3d7
- SHA1 85dc92edd4b0049ed9049e075c4def8a3d64e43b
- SHA512 5c83303934eecfa61c43a071d29c98e5804d37a5dc7f7b035772d6a168b0c5e65dfabef20b46214e65493c4bda44831cafee83615498fbe9e718c884f4650edf
- SSDEEP 384:iQobG82oiaPaf/gn5LQ0+0zdQUv2CtyW8fiFISWbW9pWJbWivT1Nq0GftpBjAvnC:nA299fI5dxzL2CC11vimvnEBBNFT
- TLSH
  T145F25B54EBAC8953DEE71D3062A4D9423A3AEB936C10C25E2699E18D0D83BD1EB11737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Obfuscated with Agile.Net obfuscator

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32