Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
8Static
static
BlueSoleil...ER.exe
windows7-x64
BlueSoleil...ER.exe
windows10-2004-x64
BlueSoleil...UI.dll
windows7-x64
1BlueSoleil...UI.dll
windows10-2004-x64
3BlueSoleil...ui.dll
windows7-x64
1BlueSoleil...ui.dll
windows10-2004-x64
1BlueSoleil...ER.exe
windows7-x64
BlueSoleil...ER.exe
windows10-2004-x64
BlueSoleil...ud.dll
windows7-x64
1BlueSoleil...ud.dll
windows10-2004-x64
1BlueSoleil...ud.dll
windows7-x64
1BlueSoleil...ud.dll
windows10-2004-x64
1BlueSoleil...ay.exe
windows7-x64
1BlueSoleil...ay.exe
windows10-2004-x64
1BlueSoleil...2k.exe
windows7-x64
BlueSoleil...2k.exe
windows10-2004-x64
BlueSoleil...2k.dll
windows7-x64
1BlueSoleil...2k.dll
windows10-2004-x64
3BlueSoleil...2k.exe
windows7-x64
BlueSoleil...2k.exe
windows10-2004-x64
BlueSoleil...1f.dll
windows7-x64
1BlueSoleil...1f.dll
windows10-2004-x64
1BlueSoleil...up.exe
windows7-x64
8BlueSoleil...up.exe
windows10-2004-x64
8BlueSoleil...il.chm
windows7-x64
1BlueSoleil...il.chm
windows10-2004-x64
1BlueSoleil...fg.dll
windows7-x64
1BlueSoleil...fg.dll
windows10-2004-x64
1BlueSoleil...es.dll
windows7-x64
1BlueSoleil...es.dll
windows10-2004-x64
1BlueSoleil...fg.dll
windows7-x64
1BlueSoleil...fg.dll
windows10-2004-x64
3Analysis
-
max time kernel
27s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
03/01/2023, 22:38
Static task
static1
Behavioral task
behavioral1
Sample
BlueSoleil 1.6.1.1 official release/AmbiCom/OXSER.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
BlueSoleil 1.6.1.1 official release/AmbiCom/OXSER.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
BlueSoleil 1.6.1.1 official release/AmbiCom/OXUI.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
BlueSoleil 1.6.1.1 official release/AmbiCom/OXUI.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
BlueSoleil 1.6.1.1 official release/AmbiCom/Oxserui.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
BlueSoleil 1.6.1.1 official release/AmbiCom/Oxserui.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/OXSER.exe
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/OXSER.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SCBaud.dll
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SCBaud.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SCBaud.dll
Resource
win7-20220901-en
Behavioral task
behavioral12
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SCBaud.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SCTray.exe
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SCTray.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/Sio9502k.exe
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/Sio9502k.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SioUi2k.dll
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SioUi2k.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral19
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SktBt2k.exe
Resource
win7-20221111-en
Behavioral task
behavioral20
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SktBt2k.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/wssbtr1f.dll
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/wssbtr1f.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
BlueSoleil 1.6.1.1 official release/Setup.exe
Resource
win7-20221111-en
Behavioral task
behavioral24
Sample
BlueSoleil 1.6.1.1 official release/Setup.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral25
Sample
BlueSoleil 1.6.1.1 official release/bluesoleil.chm
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
BlueSoleil 1.6.1.1 official release/bluesoleil.chm
Resource
win10v2004-20221111-en
Behavioral task
behavioral27
Sample
BlueSoleil 1.6.1.1 official release/language/0006-Danish/btpcfg.dll
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
BlueSoleil 1.6.1.1 official release/language/0006-Danish/btpcfg.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral29
Sample
BlueSoleil 1.6.1.1 official release/language/0006-Danish/btpres.dll
Resource
win7-20221111-en
Behavioral task
behavioral30
Sample
BlueSoleil 1.6.1.1 official release/language/0006-Danish/btpres.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
BlueSoleil 1.6.1.1 official release/language/0007-German/btpcfg.dll
Resource
win7-20220901-en
Behavioral task
behavioral32
Sample
BlueSoleil 1.6.1.1 official release/language/0007-German/btpcfg.dll
Resource
win10v2004-20221111-en
General
-
Target
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SCTray.exe
-
Size
40KB
-
MD5
5957fb8e1fd27e4b58e8fbab3f128bb1
-
SHA1
ed3e82db780a9a96b2033e077adaf0a3c5625147
-
SHA256
02fdf005f854e26c7bad390a068e460a8ced0a0291372f711dc6a60d0a1d23ea
-
SHA512
fd24ebaeb69740b77ffc531565509f993c91dd2cd2cdc0b9becad88b5867d0bcb7cea59a8807ac13d2f0a890094eb03b778fd424e2a1bbd24bfd8af834a90576
-
SSDEEP
384:OghFJk2pod1aZCduDlDD6LK9V+6dyW1nSi1KAxKhEt:bhFG2ozMV06L8CRxKKt
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2036 SCTray.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2036 SCTray.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\BlueSoleil 1.6.1.1 official release\CardsDrivers\CFCardSyss\SCTray.exe"C:\Users\Admin\AppData\Local\Temp\BlueSoleil 1.6.1.1 official release\CardsDrivers\CFCardSyss\SCTray.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2036