Overview

overview

3

Static

static

3

0db9ac0264...00.exe

windows7-x64

3

0db9ac0264...00.exe

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

7z.dll

windows7-x64

3

7z.dll

windows10-2004-x64

3

7z.exe

windows7-x64

1

7z.exe

windows10-2004-x64

1

WeaselDeployer.exe

windows7-x64

1

WeaselDeployer.exe

windows10-2004-x64

1

WeaselServer.exe

windows7-x64

1

WeaselServer.exe

windows10-2004-x64

1

WinSparkle.dll

windows7-x64

1

WinSparkle.dll

windows10-2004-x64

1

curl.exe

windows7-x64

1

curl.exe

windows10-2004-x64

1

rime-insta...ig.bat

windows7-x64

1

rime-insta...ig.bat

windows10-2004-x64

1

rime-install.bat

windows7-x64

1

rime-install.bat

windows10-2004-x64

1

rime.dll

windows7-x64

1

rime.dll

windows10-2004-x64

1

start_service.bat

windows7-x64

1

start_service.bat

windows10-2004-x64

1

stop_service.bat

windows7-x64

1

stop_service.bat

windows10-2004-x64

1

weasel.dll

windows7-x64

1

weasel.dll

windows10-2004-x64

1

weasel.dll

windows7-x64

3

weasel.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    147s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/03/2024, 08:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    rime-install-config.bat

  • Size

    155B

  • MD5

    4228de8be2810447915dfd02ce4738b3

  • SHA1

    319f824ad310cfc9637ddd72dbab2f9345feeef6

  • SHA256

    23318f4970dd7ce9292bd3229269c2e22bf4c4babc561e3fa8a2371f90e1ce06

  • SHA512

    38423539095333c5bb58078a5b60a8840dae74f725678ced09ed74aa0e86aafcc75716cfb9c904fa9dabd8d66881ff2423731abeb8539b71d06e967c06dfb771

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\rime-install-config.bat"
    1⤵
      PID:2144

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads