Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3The.Saplin...PC.url
windows7-x64
1The.Saplin...PC.url
windows10-2004-x64
1The.Saplin...ng.exe
windows7-x64
1The.Saplin...ng.exe
windows10-2004-x64
1The.Saplin...ss.dll
windows7-x64
1The.Saplin...ss.dll
windows10-2004-x64
1The.Saplin...rp.dll
windows7-x64
1The.Saplin...rp.dll
windows10-2004-x64
1The.Saplin...ss.dll
windows7-x64
1The.Saplin...ss.dll
windows10-2004-x64
1The.Saplin...pt.dll
windows7-x64
1The.Saplin...pt.dll
windows10-2004-x64
1The.Saplin...ng.dll
windows7-x64
1The.Saplin...ng.dll
windows10-2004-x64
1The.Saplin...ty.dll
windows7-x64
1The.Saplin...ty.dll
windows10-2004-x64
1The.Saplin...re.dll
windows7-x64
1The.Saplin...re.dll
windows10-2004-x64
1The.Saplin...em.dll
windows7-x64
1The.Saplin...em.dll
windows10-2004-x64
1The.Saplin...ng.dll
windows7-x64
1The.Saplin...ng.dll
windows10-2004-x64
1The.Saplin...ne.dll
windows7-x64
1The.Saplin...ne.dll
windows10-2004-x64
1The.Saplin...UI.dll
windows7-x64
1The.Saplin...UI.dll
windows10-2004-x64
1The.Saplin...ne.dll
windows7-x64
1The.Saplin...ne.dll
windows10-2004-x64
1The.Saplin...ng.dll
windows7-x64
1The.Saplin...ng.dll
windows10-2004-x64
1The.Saplin...ib.dll
windows7-x64
1The.Saplin...ib.dll
windows10-2004-x64
1General
-
Target
The.Sapling.v11.30.zip
-
Size
377.0MB
-
Sample
240810-zh5htsxcpj
-
MD5
9ab028e9d646dcb0e5d37b609a57d66d
-
SHA1
35a58813c3647b4b80bb998136b4ae3840b6e796
-
SHA256
9254ff51d8e2ae293a22fb754d3a038792601bc6ecdc5e159a4b99ea7dad8a1a
-
SHA512
86ab5695f039fbcb028071a1eb9d3a11d57af90a5f8755b2520b2ac64e019796659e515ab3a508e5c2a4ea092f358de64f6e5d71f2171eed08b17b825cf3cbdc
-
SSDEEP
6291456:QYda/easBJz/5zWAkmU3wLKUJZ95PJVziueiJ50B25VDGwfGCpeq15nZQ2mzZcxF:m/yBNEiUEJ/Vf025Viw+CF1A2mFNeOah
Static task
static1
Behavioral task
behavioral1
Sample
The.Sapling.v11.30/STEAMUNLOCKED » Free Steam Games Pre-installed for PC.url
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
The.Sapling.v11.30/STEAMUNLOCKED » Free Steam Games Pre-installed for PC.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling.exe
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Assembly-CSharp-firstpass.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Assembly-CSharp-firstpass.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Assembly-CSharp.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Assembly-CSharp.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Assembly-UnityScript-firstpass.dll
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Assembly-UnityScript-firstpass.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Assembly-UnityScript.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Assembly-UnityScript.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Boo.Lang.dll
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Boo.Lang.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Mono.Security.dll
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Mono.Security.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/System.Core.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/System.Core.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/System.dll
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityEngine.Networking.dll
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityEngine.Networking.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityEngine.Timeline.dll
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityEngine.Timeline.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityEngine.UI.dll
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityEngine.UI.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityEngine.dll
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityEngine.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityScript.Lang.dll
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityScript.Lang.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/mscorlib.dll
Resource
win7-20240729-en
Behavioral task
behavioral32
Sample
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/mscorlib.dll
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
The.Sapling.v11.30/STEAMUNLOCKED » Free Steam Games Pre-installed for PC.url
-
Size
52B
-
MD5
92672216743fd0ad8799d25ec99e5096
-
SHA1
68103be0fa83db8a4a2efac6bb6169ce959a0290
-
SHA256
677d2e85447eea64fa541b8e8a9e92b41e20456360bef8642f898e7eb1b2f0db
-
SHA512
1ca286141902e64c4cac05fabc1ce0ef4d910582e720c8b38f3cf2799cadaab7cbc9d8fc925eff17e0d3280d5d074ebd856dc75d6cadbd95872cae14eddb7719
Score1/10 -
-
-
Target
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling.exe
-
Size
22.4MB
-
MD5
a55e79e51bf43dec2001efb124a2c1a0
-
SHA1
2585f4c079bd1d0a45ae67c098737b6308e7534b
-
SHA256
40d3819ec4ad62539ebf6d65f55c195f90d7305cb4c51c567f01716e831ef282
-
SHA512
88bf57278c33816ca785202acb7d80d87906e3f8f39ba45c403e7ce39ba6474a22e79fbcdc5d64270d7a886cadc8c585c5157618ba2da4230442e27cfdddfac8
-
SSDEEP
393216:sbIjpwyjlK2m5MM2cf9WPBK53E2vaPvWfpXJu4+Ahze:l2Tu4VN
Score1/10 -
-
-
Target
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Assembly-CSharp-firstpass.dll
-
Size
770KB
-
MD5
abbf536e6a09e6fd71c8848b56a0a1dc
-
SHA1
8974eb6ef33e4378354c57aa5c2299f7ca91db88
-
SHA256
de88542878137f2afba7fe7f29c9d42e3ca62070005fd420b5f101c16ee35f47
-
SHA512
43cd58f6e4b30dc3afb428591495e53e40344aa3db470d090f9b573ad4e2b68d5d93ca6fd3305002e90e0189496b3098596db23d350d34d58d1cd8b0da06f868
-
SSDEEP
24576:JfE7dYENYESaBmCGRSoqKcvYzRCnnxrBAyUowct:J9KEqUAn3eowc
Score1/10 -
-
-
Target
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Assembly-CSharp.dll
-
Size
3KB
-
MD5
c0ae6a1e25702efe118747de040dad26
-
SHA1
3f85a20530a261d160f1a49613dab7511880747b
-
SHA256
f4ac5d48b93c19f50d47b6525276f8e3f92a2929236bd7e7c0ba72eebc460bd7
-
SHA512
51582176e575468c1b0b62853da794876fa05d152ac63cc54b17bff39a62c202a4a058f303b03043d5d2479ad458560a35ff2048fdbd92297427c0bb09c3661c
Score1/10 -
-
-
Target
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Assembly-UnityScript-firstpass.dll
-
Size
51KB
-
MD5
d6d09604354cc74e81347a49241d9469
-
SHA1
6df0384d4135ee0b1f7aa2ce697ac8415fc27d85
-
SHA256
cdcee5ebfe1804490414813a0b7a76b6c5e4feb8e9ef727e29b20132f97abf9d
-
SHA512
a095ce624839e4c87f9cf0555c29186bafcc07e2986e07b85201b6581f3067e27a1ea73988901a3ffd2fb74f4b49b2901faecb24385073f70f48c705c0efe909
-
SSDEEP
768:fkAuzwp2YTuOoa8PG2VUlt3p4B8OpKPmwCWBkeXzYgHZiKsCTY8x:5uc4iuOoa8PG2VoJOpfQketHZifCTF
Score1/10 -
-
-
Target
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Assembly-UnityScript.dll
-
Size
1.1MB
-
MD5
112660ec00dcb7432b16d2f2c6f65c69
-
SHA1
cdbed716b05875ebaf60b238f9d9309592854f1b
-
SHA256
1f840b98d550382c8ca40aa380bed3cd1b50af16d46027d15e048c9b0d5bcb9b
-
SHA512
fc59b9a5803c1b28df300beaf584c4a42fb2bc061916a033c5837b822392697c91e7c85b83579a1c3466adf115c76e1173ffed128a2c789c469a8ee678305551
-
SSDEEP
24576:VsTX0s5uQjupEz6EiMVESrUq1zQn/hi8fmkRZ1xxYEyux6GcRF+7y+3:VstuQjupEz6vMnLzK/xRtGPT+7B3
Score1/10 -
-
-
Target
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Boo.Lang.dll
-
Size
124KB
-
MD5
eaf55be5e5f8532694d8a31596131cbb
-
SHA1
7c58f535607de94509cbb1ade319930bc1a95925
-
SHA256
6a3310bbc2e9fe92e1f1313a91d939aca269e4fc16ccf65ac332942119320969
-
SHA512
89a8b27d9209a0af44eb5f315f968a890fe8f2858c2fdb4447abaa2cd2342c0463c22b2c6564d3e5b724aaaf4558cb2c0b5a85f46840af468cdd0362e3e92867
-
SSDEEP
1536:VqQWYfdvJU9+ENq0n2oPJKxs5BDySAF87QhBHfrsKzKV4zmd2adBOgjV/:FVv2bPnzAxYm87QhBHD259djV/
Score1/10 -
-
-
Target
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Mono.Security.dll
-
Size
286KB
-
MD5
496608dd7044ee155402879292133ac1
-
SHA1
3f7df2e73de83ecc9a7fed1f47960846f8faa176
-
SHA256
7a95c9adde76c54c88d3fd4702132504361491ff3c5d28f9d88435c4a0fa8097
-
SHA512
0b828db9d52f99b949a3185c2a3d64f8b87a8dc7c8c08f86c6339488b92c51ee204d2cb5cd5052e88b8d3e033478e83cc2c4df77c9e5b383f4818b946db902f3
-
SSDEEP
6144:WytgJ7SzJWhaeQTVJRj02ooGzsbFNG5ms7h:KB5ceQ502oVzB
Score1/10 -
-
-
Target
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/System.Core.dll
-
Size
259KB
-
MD5
9089c966a90838d6545137d0d8865689
-
SHA1
b10a32727af7c752a095466c1b954636893d6948
-
SHA256
530928b4af3fec3536672825618de01b6b4fe6e245bcaf08fede960a3180cd0e
-
SHA512
bcd167ca098fa5e242f41df486b803d88b7a2edf40a3180de4d0f605c6d46db09dec18f568bb4fa84d3001abdbe8ddc4b299d0354b0d36d48562f7e033483116
-
SSDEEP
6144:gpmYcnyyZrWiXZQOct0jaUDzLH8AhY3qJKV3I:ccnyyZrWiXbct02UjvhWqJ
Score1/10 -
-
-
Target
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/System.dll
-
Size
1.0MB
-
MD5
4992c44b3a81a6fb8d57b121dcc8a388
-
SHA1
ca9c9cb40a44c228f0d0ceeb13f9121e4bace5dd
-
SHA256
e03d4c928eb1e61e73d37312990563ac35be42d2cbe1b2feabfaa646283ea32a
-
SHA512
513b9ee553b90b8f49640bb9e328d23b45a95a3a64918f1d950fc7ebe83def56572477710dc7ff1d9fa89d9af995cd5fcbcf3b13fed9f43895b08e9e4e336cd0
-
SSDEEP
24576:94zHCT4+QWd7pQLHJ25wlEb7pkaJ4Vg+nxSHQsAn2rJG8wAFPGKSW:9aV5j2rJG8wAFPGK
Score1/10 -
-
-
Target
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityEngine.Networking.dll
-
Size
248KB
-
MD5
88815b253fd8435a270b94a275fd0b99
-
SHA1
65be364a6ff127fa4744f45c7c1714258b04977b
-
SHA256
80eb863912294c6c97fadf4ac51f2753b76920f43114d2037bf0385a3681c000
-
SHA512
42e81c98206df940ab4592d72e59c6f66aa09b3d105a98b692c806c5e26c1ac2c8d22d25e4f25ed63b8ef4dd440da433023136e01ae22fe84f3bba3c8e964b41
-
SSDEEP
6144:fBxdJ9yFZ4fbGe6cIzm8BHrLB5Tur+4Ng7dVUU:p1gFZ4fHxQdVU
Score1/10 -
-
-
Target
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityEngine.Timeline.dll
-
Size
85KB
-
MD5
7fbfa3ec080a914ccd3ffe8a22d8f374
-
SHA1
9712f3961a254d3006a5daad6d3f0512efb92c03
-
SHA256
8a653ac91ed68e2f5bfc3b2c7f2499b18ff76643236ae61f67d469ba729fe842
-
SHA512
cb633b3838ca0bbbb72229cbd800b9358e4608a63f5209a9cadc1a6091be8f646921a0d28b30eb5bf70a6bf1f6947e25ddc363f7230624d00eb657bebc35a11c
-
SSDEEP
1536:s9mlE7GJWwGyFi59wzCcUI3V1m++/Fx0MetnvM3YIKwLh5GHfQRgFitPQIQx5:uL7GJWwLFizwzBG/x0MetnNIKwLh5Gr5
Score1/10 -
-
-
Target
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityEngine.UI.dll
-
Size
241KB
-
MD5
64a4d9e8fabf3680325520681630eafa
-
SHA1
4b1b7fe23d1d70d9040af281ee1d4d4019635e0a
-
SHA256
493e88719c21830ef11324b7f0cc269da3065cdc97f27177e60ff556356edbda
-
SHA512
6d67acb9ca950cbe0cbbe9418821edc566af2a1d1e0edbab252618bad1d77dcdadf91c13e9e40496876f87d01901f8e8aaa56ebcdf5594016b6b11abfda21393
-
SSDEEP
3072:iSPSHgAoOQ59YY6xET4Y4nSEltcHK0o8y6gtQMn5tn0rnilf4XwFttWL1xxh:yg6xanctcHwQMn5tn0rnilf4gFt01D
Score1/10 -
-
-
Target
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityEngine.dll
-
Size
1.6MB
-
MD5
263ef0d3491170a6a9b4cab7f1602d1b
-
SHA1
c3252cb69421fb614baa95e16e23c2f6d6371b53
-
SHA256
cae5b6873d0bb6c978930f9a00ff62791f1a5394bcc0c45a3027483094f09268
-
SHA512
fe08790d77e816b866b85ae78e4636aa76a2ca081f8927dcbb0ee33274c6dbc530b329fd13fcd24cd2615aae47e238afe92e4f5326fa3fa5c0db38e96c3dc2be
-
SSDEEP
49152:HUDedtPKgYBlOgy/2ubOhI9R8oXxORdWlqGkFdbLlsNjeQJOtqnUAHbJtH1QfHv/:0DzIEVkx
Score1/10 -
-
-
Target
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityScript.Lang.dll
-
Size
13KB
-
MD5
2c9ffc3d6df007d5137b710c9c5f4692
-
SHA1
d37059511aa7332addd12f02e247fd3adc62224d
-
SHA256
2b98680c1dcb2d8764b40722dc21045d451250be233d3a26d0c62f6fdcb52451
-
SHA512
c7de126e167f7d3f58bbe54c5d56a33f9df47a8d294fd18987c6be44c7a11d4e4e6da93c7d2d39f089467edf46d0404fc23950b7c0d4b8ac2f6a569487e813c5
-
SSDEEP
384:3TrivxShIt3Bz8I/S0ik0003i4/oLY4mRVf3tn6YH:33AxSyz8I/S0ik000y4Vy
Score1/10 -
-
-
Target
The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/mscorlib.dll
-
Size
2.4MB
-
MD5
54a67de565313f9f83823ed92a618b64
-
SHA1
25966ce38d3be6c99882f9cbdc8464786774073e
-
SHA256
25fcf4088544c5538534de45462390e03edbb1bf60be2b9b059b87b0f8a767c0
-
SHA512
44fbbf1c4b7b1a8569d1e450de1fd50cb81b36963cb1cba0b1c13a8ce3d448a056163cee51df0f5e1d56041fcf3c1835f59f59a74a0aff702a0bd0ba873ea25a
-
SSDEEP
24576:Zpa2qN+0B0/QbghMjgF0UbdRuMQJW26XlaOwkXqURpZM/YO6QSMJ:ZUxPB04bgZ0AlaOwkXqURpZMgO65
Score1/10 -