Overview

overview

3

Static

static

3

0db9ac0264...00.exe

windows7-x64

3

0db9ac0264...00.exe

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

7z.dll

windows7-x64

3

7z.dll

windows10-2004-x64

3

7z.exe

windows7-x64

1

7z.exe

windows10-2004-x64

1

WeaselDeployer.exe

windows7-x64

1

WeaselDeployer.exe

windows10-2004-x64

1

WeaselServer.exe

windows7-x64

1

WeaselServer.exe

windows10-2004-x64

1

WinSparkle.dll

windows7-x64

1

WinSparkle.dll

windows10-2004-x64

1

curl.exe

windows7-x64

1

curl.exe

windows10-2004-x64

1

rime-insta...ig.bat

windows7-x64

1

rime-insta...ig.bat

windows10-2004-x64

1

rime-install.bat

windows7-x64

1

rime-install.bat

windows10-2004-x64

1

rime.dll

windows7-x64

1

rime.dll

windows10-2004-x64

1

start_service.bat

windows7-x64

1

start_service.bat

windows10-2004-x64

1

stop_service.bat

windows7-x64

1

stop_service.bat

windows10-2004-x64

1

weasel.dll

windows7-x64

1

weasel.dll

windows10-2004-x64

1

weasel.dll

windows7-x64

3

weasel.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    148s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/03/2024, 08:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    rime.dll

  • Size

    3.2MB

  • MD5

    e5aa6a289227c7055da352a77aa4ed94

  • SHA1

    d8aa240d2fdc626bdbfc506243ce96266a16a253

  • SHA256

    165b4a00f400d3ad425564f1c482f9f34d3b39a25178e9199233c012fb5011a8

  • SHA512

    2f846fe900acd7da0665f7e7dc7eff7cb3e0da23e878ce1d1af7d8156ce1f09238582cded48022a9533246c95f61f330ebfe554cffd717fdab81e7db56c1a294

  • SSDEEP

    49152:fxLfGvcHjhpPmEiVkr1M0DeFLyk53nCFb96oSdRH/yCcN8sfs3J1rU4ooAiTAREt:h/VWHLyk53CFbXSTfGat07ATARes

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\rime.dll,#1
    1⤵
      PID:4156

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads