Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3selfbot/Cr...20.dll
windows10-2004-x64
1selfbot/Cr...es.dll
windows10-2004-x64
1selfbot/Cr...ni.dll
windows10-2004-x64
1selfbot/Cr...bc.dll
windows10-2004-x64
1selfbot/Cr...fb.dll
windows10-2004-x64
1selfbot/Cr...tr.dll
windows10-2004-x64
1selfbot/Cr...cb.dll
windows10-2004-x64
1selfbot/Cr...sh.dll
windows10-2004-x64
1selfbot/Cr...cb.dll
windows10-2004-x64
1selfbot/Cr...fb.dll
windows10-2004-x64
1selfbot/Cr...2s.dll
windows10-2004-x64
1selfbot/Cr...D5.dll
windows10-2004-x64
1selfbot/Cr...A1.dll
windows10-2004-x64
1selfbot/Cr...56.dll
windows10-2004-x64
1selfbot/Cr...ul.dll
windows10-2004-x64
1selfbot/Cr...le.dll
windows10-2004-x64
1selfbot/Cr...pt.dll
windows10-2004-x64
1selfbot/Cr..._c.dll
windows10-2004-x64
1selfbot/Cr...or.dll
windows10-2004-x64
1selfbot/Nighty.exe
windows10-2004-x64
1selfbot/PI...ng.dll
windows10-2004-x64
1selfbot/PI...ft.dll
windows10-2004-x64
1selfbot/PIL/_webp.dll
windows10-2004-x64
1selfbot/_asyncio.dll
windows10-2004-x64
1selfbot/_bz2.dll
windows10-2004-x64
1selfbot/_c...nd.dll
windows10-2004-x64
1selfbot/_ctypes.dll
windows10-2004-x64
1selfbot/_decimal.dll
windows10-2004-x64
1selfbot/_e...ee.dll
windows10-2004-x64
1selfbot/_hashlib.dll
windows10-2004-x64
1selfbot/tc...ge.vbs
windows10-2004-x64
1selfbot/tcl/safe.ps1
windows10-2004-x64
1Analysis
-
max time kernel
86s -
max time network
106s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
12/11/2023, 02:31
Static task
static1
Behavioral task
behavioral1
Sample
selfbot/Crypto/Cipher/_Salsa20.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral2
Sample
selfbot/Crypto/Cipher/_raw_aes.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
selfbot/Crypto/Cipher/_raw_aesni.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral4
Sample
selfbot/Crypto/Cipher/_raw_cbc.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
selfbot/Crypto/Cipher/_raw_cfb.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral6
Sample
selfbot/Crypto/Cipher/_raw_ctr.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral7
Sample
selfbot/Crypto/Cipher/_raw_ecb.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral8
Sample
selfbot/Crypto/Cipher/_raw_eksblowfish.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral9
Sample
selfbot/Crypto/Cipher/_raw_ocb.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral10
Sample
selfbot/Crypto/Cipher/_raw_ofb.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral11
Sample
selfbot/Crypto/Hash/_BLAKE2s.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral12
Sample
selfbot/Crypto/Hash/_MD5.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral13
Sample
selfbot/Crypto/Hash/_SHA1.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral14
Sample
selfbot/Crypto/Hash/_SHA256.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
selfbot/Crypto/Hash/_ghash_clmul.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral16
Sample
selfbot/Crypto/Hash/_ghash_portable.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral17
Sample
selfbot/Crypto/Protocol/_scrypt.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral18
Sample
selfbot/Crypto/Util/_cpuid_c.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral19
Sample
selfbot/Crypto/Util/_strxor.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral20
Sample
selfbot/Nighty.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
selfbot/PIL/_imaging.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral22
Sample
selfbot/PIL/_imagingft.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral23
Sample
selfbot/PIL/_webp.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral24
Sample
selfbot/_asyncio.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral25
Sample
selfbot/_bz2.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral26
Sample
selfbot/_cffi_backend.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral27
Sample
selfbot/_ctypes.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral28
Sample
selfbot/_decimal.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral29
Sample
selfbot/_elementtree.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral30
Sample
selfbot/_hashlib.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral31
Sample
selfbot/tcl/package.vbs
Resource
win10v2004-20231023-en
Behavioral task
behavioral32
Sample
selfbot/tcl/safe.ps1
Resource
win10v2004-20231023-en
General
-
Target
selfbot/Crypto/Cipher/_Salsa20.dll
-
Size
13KB
-
MD5
30f13366926ddc878b6d761bec41879e
-
SHA1
4b98075ccbf72a6cbf882b6c5cadef8dc6ec91db
-
SHA256
19d5f8081552a8aafe901601d1ff5c054869308cef92d03bcbe7bd2bb1291f23
-
SHA512
bdcec85915ab6ec1d37c1d36b075ae2e69aa638b80cd08971d5fdfd9474b4d1cf442abf8e93aa991f5a8dcf6db9d79fb67a9fe7148581e6910d9c952a5e166b4
-
SSDEEP
192:SF/1nb2eqCQtkluknuz4ceS4QDuEA7cqgYvEP:o2P6luLtn4QDHmgYvEP
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\selfbot\Crypto\Cipher\_Salsa20.dll,#11⤵PID:1348
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3516