Overview

overview

3

Static

static

3

0db9ac0264...00.exe

windows7-x64

3

0db9ac0264...00.exe

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

7z.dll

windows7-x64

3

7z.dll

windows10-2004-x64

3

7z.exe

windows7-x64

1

7z.exe

windows10-2004-x64

1

WeaselDeployer.exe

windows7-x64

1

WeaselDeployer.exe

windows10-2004-x64

1

WeaselServer.exe

windows7-x64

1

WeaselServer.exe

windows10-2004-x64

1

WinSparkle.dll

windows7-x64

1

WinSparkle.dll

windows10-2004-x64

1

curl.exe

windows7-x64

1

curl.exe

windows10-2004-x64

1

rime-insta...ig.bat

windows7-x64

1

rime-insta...ig.bat

windows10-2004-x64

1

rime-install.bat

windows7-x64

1

rime-install.bat

windows10-2004-x64

1

rime.dll

windows7-x64

1

rime.dll

windows10-2004-x64

1

start_service.bat

windows7-x64

1

start_service.bat

windows10-2004-x64

1

stop_service.bat

windows7-x64

1

stop_service.bat

windows10-2004-x64

1

weasel.dll

windows7-x64

1

weasel.dll

windows10-2004-x64

1

weasel.dll

windows7-x64

3

weasel.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    143s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-03-2024 08:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    curl.exe

  • Size

    3.4MB

  • MD5

    d9ea512ee580ecffee587a4c3759527f

  • SHA1

    b91480398b8820436b6634421d5af628e482b890

  • SHA256

    4c493f7dc51a50bbe139993cdb1267dd1f7a33020df9075ecd7d28fdce9ec63f

  • SHA512

    ba212d929e7ee9478ff141f36950673eabcb31f71c39818d3f6a0a6f7ab57e2676445d815baf6bc5f97477b4c8d6cbcc07f8051b87cfe800924064b5989ce7c4

  • SSDEEP

    98304:Q61JrfvgRnMoHNNbwH3MhrHAGeEyU/4BiCklNl5tj0Qh+Pw/YlAKGC9eX2nuZHz7:/rfvgRMoHNNbwH3eTeEyU/4BiCklNl5D

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\curl.exe
    "C:\Users\Admin\AppData\Local\Temp\curl.exe"
    1⤵
      PID:2436

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2436-0-0x00000000007B0000-0x0000000000B23000-memory.dmp

      Filesize

      3.4MB

      Download