Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3PlagueRust-master.zip
windows11-21h2-x64
1PlagueRust...st.exe
windows11-21h2-x64
1PlagueRust...st.exe
windows11-21h2-x64
1PlagueRust...hgg.js
windows11-21h2-x64
3PlagueRust...asn.js
windows11-21h2-x64
3PlagueRust...h1.vbs
windows11-21h2-x64
1PlagueRust...h2.vbs
windows11-21h2-x64
1PlagueRust...est.sh
windows11-21h2-x64
3PlagueRust...lib.js
windows11-21h2-x64
3PlagueRust...st.vbs
windows11-21h2-x64
1PlagueRust...est.js
windows11-21h2-x64
3PlagueRust...pto.js
windows11-21h2-x64
3PlagueRust...ry.vbs
windows11-21h2-x64
1PlagueRust...mqv.js
windows11-21h2-x64
3PlagueRust...les.js
windows11-21h2-x64
3PlagueRust...lgt.js
windows11-21h2-x64
3PlagueRust...est.js
windows11-21h2-x64
3PlagueRust...mqv.js
windows11-21h2-x64
3PlagueRust...mqv.js
windows11-21h2-x64
3PlagueRust...eue.js
windows11-21h2-x64
3PlagueRust...sm.cmd
windows11-21h2-x64
1PlagueRust...asm.sh
windows11-21h2-x64
3PlagueRust...pt.vbs
windows11-21h2-x64
1PlagueRust...est.js
windows11-21h2-x64
3PlagueRust...at0.js
windows11-21h2-x64
3PlagueRust...at1.js
windows11-21h2-x64
3PlagueRust...at2.js
windows11-21h2-x64
3PlagueRust...at3.js
windows11-21h2-x64
3PlagueRust...at4.js
windows11-21h2-x64
3PlagueRust...at7.js
windows11-21h2-x64
3PlagueRust...ate.js
windows11-21h2-x64
3PlagueRust...ts.vbs
windows11-21h2-x64
1Analysis
-
max time kernel
91s -
max time network
99s -
platform
windows11-21h2_x64 -
resource
win11-20240730-en -
resource tags
arch:x64arch:x86image:win11-20240730-enlocale:en-usos:windows11-21h2-x64system -
submitted
01/08/2024, 20:32
Static task
static1
Behavioral task
behavioral1
Sample
PlagueRust-master.zip
Resource
win11-20240730-en
Behavioral task
behavioral2
Sample
PlagueRust-master/PlagueRust/Desktop/PlagueRust.exe
Resource
win11-20240730-en
Behavioral task
behavioral3
Sample
PlagueRust-master/PlagueRust/PlagueRust.exe
Resource
win11-20240730-en
Behavioral task
behavioral4
Sample
PlagueRust-master/PlagueRust/authgg.js
Resource
win11-20240730-en
Behavioral task
behavioral5
Sample
PlagueRust-master/PlagueRust/crypto/asn.js
Resource
win11-20240730-en
Behavioral task
behavioral6
Sample
PlagueRust-master/PlagueRust/crypto/bench1.vbs
Resource
win11-20240730-en
Behavioral task
behavioral7
Sample
PlagueRust-master/PlagueRust/crypto/bench2.vbs
Resource
win11-20240730-en
Behavioral task
behavioral8
Sample
PlagueRust-master/PlagueRust/crypto/cryptest.sh
Resource
win11-20240730-en
Behavioral task
behavioral9
Sample
PlagueRust-master/PlagueRust/crypto/cryptlib.js
Resource
win11-20240729-en
Behavioral task
behavioral10
Sample
PlagueRust-master/PlagueRust/crypto/datatest.vbs
Resource
win11-20240730-en
Behavioral task
behavioral11
Sample
PlagueRust-master/PlagueRust/crypto/dlltest.js
Resource
win11-20240730-en
Behavioral task
behavioral12
Sample
PlagueRust-master/PlagueRust/crypto/eccrypto.js
Resource
win11-20240730-en
Behavioral task
behavioral13
Sample
PlagueRust-master/PlagueRust/crypto/factory.vbs
Resource
win11-20240730-en
Behavioral task
behavioral14
Sample
PlagueRust-master/PlagueRust/crypto/fhmqv.js
Resource
win11-20240730-en
Behavioral task
behavioral15
Sample
PlagueRust-master/PlagueRust/crypto/files.js
Resource
win11-20240730-en
Behavioral task
behavioral16
Sample
PlagueRust-master/PlagueRust/crypto/fipsalgt.js
Resource
win11-20240730-en
Behavioral task
behavioral17
Sample
PlagueRust-master/PlagueRust/crypto/fipstest.js
Resource
win11-20240730-en
Behavioral task
behavioral18
Sample
PlagueRust-master/PlagueRust/crypto/hmqv.js
Resource
win11-20240730-en
Behavioral task
behavioral19
Sample
PlagueRust-master/PlagueRust/crypto/mqv.js
Resource
win11-20240730-en
Behavioral task
behavioral20
Sample
PlagueRust-master/PlagueRust/crypto/queue.js
Resource
win11-20240730-en
Behavioral task
behavioral21
Sample
PlagueRust-master/PlagueRust/crypto/rdrand-masm.cmd
Resource
win11-20240730-en
Behavioral task
behavioral22
Sample
PlagueRust-master/PlagueRust/crypto/rdrand-nasm.sh
Resource
win11-20240730-en
Behavioral task
behavioral23
Sample
PlagueRust-master/PlagueRust/crypto/scrypt.vbs
Resource
win11-20240730-en
Behavioral task
behavioral24
Sample
PlagueRust-master/PlagueRust/crypto/test.js
Resource
win11-20240730-en
Behavioral task
behavioral25
Sample
PlagueRust-master/PlagueRust/crypto/validat0.js
Resource
win11-20240729-en
Behavioral task
behavioral26
Sample
PlagueRust-master/PlagueRust/crypto/validat1.js
Resource
win11-20240730-en
Behavioral task
behavioral27
Sample
PlagueRust-master/PlagueRust/crypto/validat2.js
Resource
win11-20240730-en
Behavioral task
behavioral28
Sample
PlagueRust-master/PlagueRust/crypto/validat3.js
Resource
win11-20240730-en
Behavioral task
behavioral29
Sample
PlagueRust-master/PlagueRust/crypto/validat4.js
Resource
win11-20240730-en
Behavioral task
behavioral30
Sample
PlagueRust-master/PlagueRust/crypto/validat7.js
Resource
win11-20240730-en
Behavioral task
behavioral31
Sample
PlagueRust-master/PlagueRust/crypto/zinflate.js
Resource
win11-20240730-en
Behavioral task
behavioral32
Sample
PlagueRust-master/PlagueRust/drawing/imgui/imgui_widgets.vbs
Resource
win11-20240730-en
General
-
Target
PlagueRust-master.zip
-
Size
12.4MB
-
MD5
cc58234c2f07a0317f794f020e06efcf
-
SHA1
9655c05040093a2f2dab6f0a207ddaaab949ef38
-
SHA256
d2974025cd3c93767b15c6f11c105f92c5c5f5b24389f69b2993c526f8c372b6
-
SHA512
99fe0580bd8e440df4f254c7c9cff710c6b8c5b8433ab5714211ca44c5f6212a3c5079ec2554bb60a628b423e978003b04be0cbec6bc03d01af389be5dd23e21
-
SSDEEP
393216:OQwhztkjbBHCuQa/Ytv4K0BbNszFzEuf1Zhsehc:pa0HCuD/BCzFzEkCcc
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\PlagueRust-master.zip1⤵PID:1404
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4676