Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

0db9ac0264...00.exe

windows7-x64

3

0db9ac0264...00.exe

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

7z.dll

windows7-x64

3

7z.dll

windows10-2004-x64

3

7z.exe

windows7-x64

1

7z.exe

windows10-2004-x64

1

WeaselDeployer.exe

windows7-x64

1

WeaselDeployer.exe

windows10-2004-x64

1

WeaselServer.exe

windows7-x64

1

WeaselServer.exe

windows10-2004-x64

1

WinSparkle.dll

windows7-x64

1

WinSparkle.dll

windows10-2004-x64

1

curl.exe

windows7-x64

1

curl.exe

windows10-2004-x64

1

rime-insta...ig.bat

windows7-x64

1

rime-insta...ig.bat

windows10-2004-x64

1

rime-install.bat

windows7-x64

1

rime-install.bat

windows10-2004-x64

1

rime.dll

windows7-x64

1

rime.dll

windows10-2004-x64

1

start_service.bat

windows7-x64

1

start_service.bat

windows10-2004-x64

1

stop_service.bat

windows7-x64

1

stop_service.bat

windows10-2004-x64

1

weasel.dll

windows7-x64

1

weasel.dll

windows10-2004-x64

1

weasel.dll

windows7-x64

3

weasel.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0db9ac02645846b5033b403a818544371046214bfedef7e70d44f5f825713c00

  • Size

    11.1MB

  • Sample

    240326-kx1qvsef99

  • MD5

    dc54d1d9611d52fa3629ccb4caeb9c6c

  • SHA1

    2cfb6e5404873eba09d3e75bea958d7e69708d26

  • SHA256

    0db9ac02645846b5033b403a818544371046214bfedef7e70d44f5f825713c00

  • SHA512

    45465ded81b5c23e027568691557329e1d422571125155b30c14bf664cf3310b56cc0051429317f8f15251c4d4226fd364879b03b6bb5d36667b1301561a6c34

  • SSDEEP

    196608:KTW3JbDWofNAA0ZC109Fdhf0FbWGo9mrGbZX7yyqrD+YijA92Tw67fq1hEgnT:K63JbpZ0ZCqjaemr6ZLNqHvtml0Es

Score
3/10

Malware Config

Targets

    • Target

      0db9ac02645846b5033b403a818544371046214bfedef7e70d44f5f825713c00

    • Size

      11.1MB

    • MD5

      dc54d1d9611d52fa3629ccb4caeb9c6c

    • SHA1

      2cfb6e5404873eba09d3e75bea958d7e69708d26

    • SHA256

      0db9ac02645846b5033b403a818544371046214bfedef7e70d44f5f825713c00

    • SHA512

      45465ded81b5c23e027568691557329e1d422571125155b30c14bf664cf3310b56cc0051429317f8f15251c4d4226fd364879b03b6bb5d36667b1301561a6c34

    • SSDEEP

      196608:KTW3JbDWofNAA0ZC109Fdhf0FbWGo9mrGbZX7yyqrD+YijA92Tw67fq1hEgnT:K63JbpZ0ZCqjaemr6ZLNqHvtml0Es

    Score
    3/10
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      4add245d4ba34b04f213409bfe504c07

    • SHA1

      ef756d6581d70e87d58cc4982e3f4d18e0ea5b09

    • SHA256

      9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706

    • SHA512

      1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d

    • SSDEEP

      192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      1d8f01a83ddd259bc339902c1d33c8f1

    • SHA1

      9f7806af462c94c39e2ec6cc9c7ad05c44eba04e

    • SHA256

      4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed

    • SHA512

      28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567

    • SSDEEP

      96:o4Ev02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YsNqkzfFc:o4EvCu5e81785qHFcU0PuAw0uyGIFc

    Score
    3/10
    behavioral5behavioral6

    • Target

      7z.dll

    • Size

      1.1MB

    • MD5

      e7ae42ea24cff97bdead0c560ef2add1

    • SHA1

      866f380a62622ab1b6c7705ddc116635e6e3cc86

    • SHA256

      db2897eeea65401ee1bd8feeebd0dbae8867a27ff4575f12b0b8a613444a5ef7

    • SHA512

      a4a27b2be70e9102d95ee319ec365b0dc434d4e8cd25589ce8a75b73bbe4f06b071caa907c7a61387b2ce6a35a70873593564499b88598f77a7c25c47448fb0a

    • SSDEEP

      24576:ax6t04DSc9S0B07sjsPEtd+F5zrtV53SePrnvgwPWrlahtN:axBOp1B07sjsPEtd2znPrnIwuh0N

    Score
    3/10
    behavioral7behavioral8

    • Target

      7z.exe

    • Size

      286KB

    • MD5

      afc08ce359e79887e45b8460e124d63e

    • SHA1

      e8dcddb302f01d51da3bcbfa6707d025a896aa57

    • SHA256

      a20d93e7dc3711e8b8a8f63bd148ddc70de8c952de882c5495ac121bfedb749f

    • SHA512

      32d3b8d964711a5706f8cf9f87bc6e33670bba2cb3ab88603dec399652ac7fe297a4692f0865a0bdcbd06515d6b0a84e5a96d1b7fda48f556543536889ba387a

    • SSDEEP

      6144:u//CluW8GaYMOZjlRRfCqjgs961nr6FX3xgws8wk:Y/nL4Xa+P++fq

    Score
    1/10
    behavioral10behavioral9

    • Target

      WeaselDeployer.exe

    • Size

      781KB

    • MD5

      ac17c647e1d28dbee1d3005482e87848

    • SHA1

      1eb73713a30de1e22b74622cb2f58dae97f8fa8d

    • SHA256

      bd6580bee7dde9cb7dd8d972696abbc08aa047dd7259d98761de9738d6a2318d

    • SHA512

      6c0983fb712626b0e9aed9d5d191bd4736bacde118acdcc25ad1ffcfd5f709b41981212e1b9e8fca9d216ac8bfd1c74cb1a6f10e98e28ea145fe544e5d730a1b

    • SSDEEP

      12288:nYHieGJM0ByuMBBsDQEyPQOutZBC08K4VB1/3VcmdIur+GAaUBG9ND4h0XkeZah3:YSoFcEIur+9VG9NshqkgahgRurt

    Score
    1/10
    behavioral11behavioral12

    • Target

      WeaselServer.exe

    • Size

      1.2MB

    • MD5

      c73fd521bee0be1853382c40668a47b2

    • SHA1

      22f3a4ef96899e762b62867596fe2dbe23f6d725

    • SHA256

      e0159b77e47c66ad75c1ed68f31430e857a5178f86ba574f067850db934f067a

    • SHA512

      98497fc5ca85d2cc2f789c0aece544a2c037577184d50d4873df145ab39992204cdd3613d8d0cae81503e38eeebc4b695cb26dfad27dd411220b12716c6575c6

    • SSDEEP

      24576:b17JklFJ2+roRfxokK0PNKXOoDaH5dk89f3z:bd0e+rooTOJHIy

    Score
    1/10
    behavioral13behavioral14

    • Target

      WinSparkle.dll

    • Size

      2.7MB

    • MD5

      63ef89eaaeaa9fc7dc8207c080181b1b

    • SHA1

      00b17c87f86857cde75f711849b892bdc6f77c75

    • SHA256

      f3c86101e041db5476c4d491ab1175bfac22a26ce41046551b283ad74df27718

    • SHA512

      4924994a885ccdc05475c476245355bec8c659ac993a0514a4e97e126ba787cddcaa597f019f666ccad896f7b892010d3b833610a923393eaaad5b8288a376e7

    • SSDEEP

      24576:Wbn+fbzelhSytKX9geCR4KpvSxVHxY81ciYxgFoOVU7DfyAed/jpmlM5D+3/il/N:Wbn+Iq9ge5KuVRY8KiY1+Aed/Qe5D+i

    Score
    1/10
    behavioral15behavioral16

    • Target

      curl.exe

    • Size

      3.4MB

    • MD5

      d9ea512ee580ecffee587a4c3759527f

    • SHA1

      b91480398b8820436b6634421d5af628e482b890

    • SHA256

      4c493f7dc51a50bbe139993cdb1267dd1f7a33020df9075ecd7d28fdce9ec63f

    • SHA512

      ba212d929e7ee9478ff141f36950673eabcb31f71c39818d3f6a0a6f7ab57e2676445d815baf6bc5f97477b4c8d6cbcc07f8051b87cfe800924064b5989ce7c4

    • SSDEEP

      98304:Q61JrfvgRnMoHNNbwH3MhrHAGeEyU/4BiCklNl5tj0Qh+Pw/YlAKGC9eX2nuZHz7:/rfvgRMoHNNbwH3eTeEyU/4BiCklNl5D

    Score
    1/10
    behavioral17behavioral18

    • Target

      rime-install-config.bat

    • Size

      155B

    • MD5

      4228de8be2810447915dfd02ce4738b3

    • SHA1

      319f824ad310cfc9637ddd72dbab2f9345feeef6

    • SHA256

      23318f4970dd7ce9292bd3229269c2e22bf4c4babc561e3fa8a2371f90e1ce06

    • SHA512

      38423539095333c5bb58078a5b60a8840dae74f725678ced09ed74aa0e86aafcc75716cfb9c904fa9dabd8d66881ff2423731abeb8539b71d06e967c06dfb771

    Score
    1/10
    behavioral19behavioral20

    • Target

      rime-install.bat

    • Size

      10KB

    • MD5

      e66b05c5be11e99ae6da714ee1a09fc4

    • SHA1

      b984b31f6e7cc9d4bd5bf0c4f75399218da9387b

    • SHA256

      13687b87072f72cd9ca3813cbf6857375d8f6c472387c44a1ff2f4d16d58947c

    • SHA512

      6976030e669af5389c4dfa9929c85f341910cbe65264a7317d64bd0c1f4fa6dcd605bde20322a5a498c3499ea79cd7a0176fd5547284da8785285c13b7de08dd

    • SSDEEP

      192:M24/vL2Bbn0a+vx0ADv5vPDRiO6QvDkBt4yUFWDeYUWCP+DvJvOzSknbk:F4cnX/0dRiO6XCFWexWYIJGjk

    Score
    1/10
    behavioral21behavioral22

    • Target

      rime.dll

    • Size

      3.2MB

    • MD5

      e5aa6a289227c7055da352a77aa4ed94

    • SHA1

      d8aa240d2fdc626bdbfc506243ce96266a16a253

    • SHA256

      165b4a00f400d3ad425564f1c482f9f34d3b39a25178e9199233c012fb5011a8

    • SHA512

      2f846fe900acd7da0665f7e7dc7eff7cb3e0da23e878ce1d1af7d8156ce1f09238582cded48022a9533246c95f61f330ebfe554cffd717fdab81e7db56c1a294

    • SSDEEP

      49152:fxLfGvcHjhpPmEiVkr1M0DeFLyk53nCFb96oSdRH/yCcN8sfs3J1rU4ooAiTAREt:h/VWHLyk53CFbXSTfGat07ATARes

    Score
    1/10
    behavioral23behavioral24

    • Target

      start_service.bat

    • Size

      37B

    • MD5

      c9ff6e7e247a37749dad7cb9b7349251

    • SHA1

      cea1a1e73910cd730e0e85e773e526b57cc87675

    • SHA256

      be91ec759719207ec13d62ee479cdac7e7b7effac7515b59ef834bbec44d484f

    • SHA512

      2c9e0992e951740f25983768348d8e672ff1aaedf29b2a645b8b377c2be347c8864a43f9e99d25f634fac3bd68841a901890ad193718c48cea9108caef982325

    Score
    1/10
    behavioral25behavioral26

    • Target

      stop_service.bat

    • Size

      33B

    • MD5

      bfe37ab6a3dd8334125a7ae3d43e6355

    • SHA1

      0f4982290f5d96fee2c9355592a8f2ebfd8199cb

    • SHA256

      cfe581c1702895dd3fe12f5109ff6115c8fc7b761145f990d6a585892041d7c7

    • SHA512

      e56e6aee6b476f002f06cae2407c9b320e30197e102dde866e08e01b77a79979bbd44d5b8498f95570a58ee36c4574256af6f391a830199ff85cc1319818d835

    Score
    1/10
    behavioral27behavioral28

    • Target

      weasel.dll

    • Size

      834KB

    • MD5

      5a905d252c8a73c6dc79ac89038a71f4

    • SHA1

      4e73778dfdb8dcf5a32f3ca9a75ed1b7f65c8058

    • SHA256

      391bf397df1af7efcd78b87f5e551e0a23d8b4e73261b37367e47cb84997cabf

    • SHA512

      945474a9043bbf83c485130699eaf6179e998f200fdcad6647f5991d13caaac052a6783610ed5fed251b2c4375ad28d3e8ae9c4d03063362187d70e921ab3887

    • SSDEEP

      12288:BLI4zGR2ExV87z+lxvhiYmjqEl3DOaDPmWXY3Usk5XgIK:BLIfV87z+lxvhiiEl3D7DP1gU15X

    Score
    1/10
    behavioral29behavioral30

    • Target

      weasel.ime

    • Size

      529KB

    • MD5

      67f09d52dd96d48109af11170c132716

    • SHA1

      b0cff198a4b714e27df6d71d72c1a80d3fc0ab8c

    • SHA256

      29ac764b285f0de2e330d7b52964dc70d24139e45d2354206144e41e1b9aed61

    • SHA512

      69053196bbd58ad3d83dc02081ff1fdfe5c77157e32c83c486c7fdc2505f2a41ea633771224710999c6198177f1f64f4725043d0454116d5f0a145fb7b1533cf

    • SSDEEP

      12288:qNd/JY0gmbEvxfCUBJNvbT8pZi82YC0Nuo4Iqp5/DeTTuRyVbbVyAm:qNPBmJNvbT8pZi82Y6NIu/MuRylpyA

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks