Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

The.Saplin...PC.url

windows7-x64

1

The.Saplin...PC.url

windows10-2004-x64

1

The.Saplin...ng.exe

windows7-x64

1

The.Saplin...ng.exe

windows10-2004-x64

1

The.Saplin...ss.dll

windows7-x64

1

The.Saplin...ss.dll

windows10-2004-x64

1

The.Saplin...rp.dll

windows7-x64

1

The.Saplin...rp.dll

windows10-2004-x64

1

The.Saplin...ss.dll

windows7-x64

1

The.Saplin...ss.dll

windows10-2004-x64

1

The.Saplin...pt.dll

windows7-x64

1

The.Saplin...pt.dll

windows10-2004-x64

1

The.Saplin...ng.dll

windows7-x64

1

The.Saplin...ng.dll

windows10-2004-x64

1

The.Saplin...ty.dll

windows7-x64

1

The.Saplin...ty.dll

windows10-2004-x64

1

The.Saplin...re.dll

windows7-x64

1

The.Saplin...re.dll

windows10-2004-x64

1

The.Saplin...em.dll

windows7-x64

1

The.Saplin...em.dll

windows10-2004-x64

1

The.Saplin...ng.dll

windows7-x64

1

The.Saplin...ng.dll

windows10-2004-x64

1

The.Saplin...ne.dll

windows7-x64

1

The.Saplin...ne.dll

windows10-2004-x64

1

The.Saplin...UI.dll

windows7-x64

1

The.Saplin...UI.dll

windows10-2004-x64

1

The.Saplin...ne.dll

windows7-x64

1

The.Saplin...ne.dll

windows10-2004-x64

1

The.Saplin...ng.dll

windows7-x64

1

The.Saplin...ng.dll

windows10-2004-x64

1

The.Saplin...ib.dll

windows7-x64

1

The.Saplin...ib.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    The.Sapling.v11.30.zip

  • Size

    377.0MB

  • Sample

    240810-zh5htsxcpj

  • MD5

    9ab028e9d646dcb0e5d37b609a57d66d

  • SHA1

    35a58813c3647b4b80bb998136b4ae3840b6e796

  • SHA256

    9254ff51d8e2ae293a22fb754d3a038792601bc6ecdc5e159a4b99ea7dad8a1a

  • SHA512

    86ab5695f039fbcb028071a1eb9d3a11d57af90a5f8755b2520b2ac64e019796659e515ab3a508e5c2a4ea092f358de64f6e5d71f2171eed08b17b825cf3cbdc

  • SSDEEP

    6291456:QYda/easBJz/5zWAkmU3wLKUJZ95PJVziueiJ50B25VDGwfGCpeq15nZQ2mzZcxF:m/yBNEiUEJ/Vf025Viw+CF1A2mFNeOah

Score
3/10

Malware Config

Targets

    • Target

      The.Sapling.v11.30/STEAMUNLOCKED » Free Steam Games Pre-installed for PC.url

    • Size

      52B

    • MD5

      92672216743fd0ad8799d25ec99e5096

    • SHA1

      68103be0fa83db8a4a2efac6bb6169ce959a0290

    • SHA256

      677d2e85447eea64fa541b8e8a9e92b41e20456360bef8642f898e7eb1b2f0db

    • SHA512

      1ca286141902e64c4cac05fabc1ce0ef4d910582e720c8b38f3cf2799cadaab7cbc9d8fc925eff17e0d3280d5d074ebd856dc75d6cadbd95872cae14eddb7719

    Score
    1/10
    behavioral1behavioral2

    • Target

      The.Sapling.v11.30/The.Sapling.v11.30/the_sapling.exe

    • Size

      22.4MB

    • MD5

      a55e79e51bf43dec2001efb124a2c1a0

    • SHA1

      2585f4c079bd1d0a45ae67c098737b6308e7534b

    • SHA256

      40d3819ec4ad62539ebf6d65f55c195f90d7305cb4c51c567f01716e831ef282

    • SHA512

      88bf57278c33816ca785202acb7d80d87906e3f8f39ba45c403e7ce39ba6474a22e79fbcdc5d64270d7a886cadc8c585c5157618ba2da4230442e27cfdddfac8

    • SSDEEP

      393216:sbIjpwyjlK2m5MM2cf9WPBK53E2vaPvWfpXJu4+Ahze:l2Tu4VN

    Score
    1/10
    behavioral3behavioral4

    • Target

      The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Assembly-CSharp-firstpass.dll

    • Size

      770KB

    • MD5

      abbf536e6a09e6fd71c8848b56a0a1dc

    • SHA1

      8974eb6ef33e4378354c57aa5c2299f7ca91db88

    • SHA256

      de88542878137f2afba7fe7f29c9d42e3ca62070005fd420b5f101c16ee35f47

    • SHA512

      43cd58f6e4b30dc3afb428591495e53e40344aa3db470d090f9b573ad4e2b68d5d93ca6fd3305002e90e0189496b3098596db23d350d34d58d1cd8b0da06f868

    • SSDEEP

      24576:JfE7dYENYESaBmCGRSoqKcvYzRCnnxrBAyUowct:J9KEqUAn3eowc

    Score
    1/10
    behavioral5behavioral6

    • Target

      The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Assembly-CSharp.dll

    • Size

      3KB

    • MD5

      c0ae6a1e25702efe118747de040dad26

    • SHA1

      3f85a20530a261d160f1a49613dab7511880747b

    • SHA256

      f4ac5d48b93c19f50d47b6525276f8e3f92a2929236bd7e7c0ba72eebc460bd7

    • SHA512

      51582176e575468c1b0b62853da794876fa05d152ac63cc54b17bff39a62c202a4a058f303b03043d5d2479ad458560a35ff2048fdbd92297427c0bb09c3661c

    Score
    1/10
    behavioral7behavioral8

    • Target

      The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Assembly-UnityScript-firstpass.dll

    • Size

      51KB

    • MD5

      d6d09604354cc74e81347a49241d9469

    • SHA1

      6df0384d4135ee0b1f7aa2ce697ac8415fc27d85

    • SHA256

      cdcee5ebfe1804490414813a0b7a76b6c5e4feb8e9ef727e29b20132f97abf9d

    • SHA512

      a095ce624839e4c87f9cf0555c29186bafcc07e2986e07b85201b6581f3067e27a1ea73988901a3ffd2fb74f4b49b2901faecb24385073f70f48c705c0efe909

    • SSDEEP

      768:fkAuzwp2YTuOoa8PG2VUlt3p4B8OpKPmwCWBkeXzYgHZiKsCTY8x:5uc4iuOoa8PG2VoJOpfQketHZifCTF

    Score
    1/10
    behavioral10behavioral9

    • Target

      The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Assembly-UnityScript.dll

    • Size

      1.1MB

    • MD5

      112660ec00dcb7432b16d2f2c6f65c69

    • SHA1

      cdbed716b05875ebaf60b238f9d9309592854f1b

    • SHA256

      1f840b98d550382c8ca40aa380bed3cd1b50af16d46027d15e048c9b0d5bcb9b

    • SHA512

      fc59b9a5803c1b28df300beaf584c4a42fb2bc061916a033c5837b822392697c91e7c85b83579a1c3466adf115c76e1173ffed128a2c789c469a8ee678305551

    • SSDEEP

      24576:VsTX0s5uQjupEz6EiMVESrUq1zQn/hi8fmkRZ1xxYEyux6GcRF+7y+3:VstuQjupEz6vMnLzK/xRtGPT+7B3

    Score
    1/10
    behavioral11behavioral12

    • Target

      The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Boo.Lang.dll

    • Size

      124KB

    • MD5

      eaf55be5e5f8532694d8a31596131cbb

    • SHA1

      7c58f535607de94509cbb1ade319930bc1a95925

    • SHA256

      6a3310bbc2e9fe92e1f1313a91d939aca269e4fc16ccf65ac332942119320969

    • SHA512

      89a8b27d9209a0af44eb5f315f968a890fe8f2858c2fdb4447abaa2cd2342c0463c22b2c6564d3e5b724aaaf4558cb2c0b5a85f46840af468cdd0362e3e92867

    • SSDEEP

      1536:VqQWYfdvJU9+ENq0n2oPJKxs5BDySAF87QhBHfrsKzKV4zmd2adBOgjV/:FVv2bPnzAxYm87QhBHD259djV/

    Score
    1/10
    behavioral13behavioral14

    • Target

      The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Mono.Security.dll

    • Size

      286KB

    • MD5

      496608dd7044ee155402879292133ac1

    • SHA1

      3f7df2e73de83ecc9a7fed1f47960846f8faa176

    • SHA256

      7a95c9adde76c54c88d3fd4702132504361491ff3c5d28f9d88435c4a0fa8097

    • SHA512

      0b828db9d52f99b949a3185c2a3d64f8b87a8dc7c8c08f86c6339488b92c51ee204d2cb5cd5052e88b8d3e033478e83cc2c4df77c9e5b383f4818b946db902f3

    • SSDEEP

      6144:WytgJ7SzJWhaeQTVJRj02ooGzsbFNG5ms7h:KB5ceQ502oVzB

    Score
    1/10
    behavioral15behavioral16

    • Target

      The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/System.Core.dll

    • Size

      259KB

    • MD5

      9089c966a90838d6545137d0d8865689

    • SHA1

      b10a32727af7c752a095466c1b954636893d6948

    • SHA256

      530928b4af3fec3536672825618de01b6b4fe6e245bcaf08fede960a3180cd0e

    • SHA512

      bcd167ca098fa5e242f41df486b803d88b7a2edf40a3180de4d0f605c6d46db09dec18f568bb4fa84d3001abdbe8ddc4b299d0354b0d36d48562f7e033483116

    • SSDEEP

      6144:gpmYcnyyZrWiXZQOct0jaUDzLH8AhY3qJKV3I:ccnyyZrWiXbct02UjvhWqJ

    Score
    1/10
    behavioral17behavioral18

    • Target

      The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/System.dll

    • Size

      1.0MB

    • MD5

      4992c44b3a81a6fb8d57b121dcc8a388

    • SHA1

      ca9c9cb40a44c228f0d0ceeb13f9121e4bace5dd

    • SHA256

      e03d4c928eb1e61e73d37312990563ac35be42d2cbe1b2feabfaa646283ea32a

    • SHA512

      513b9ee553b90b8f49640bb9e328d23b45a95a3a64918f1d950fc7ebe83def56572477710dc7ff1d9fa89d9af995cd5fcbcf3b13fed9f43895b08e9e4e336cd0

    • SSDEEP

      24576:94zHCT4+QWd7pQLHJ25wlEb7pkaJ4Vg+nxSHQsAn2rJG8wAFPGKSW:9aV5j2rJG8wAFPGK

    Score
    1/10
    behavioral19behavioral20

    • Target

      The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityEngine.Networking.dll

    • Size

      248KB

    • MD5

      88815b253fd8435a270b94a275fd0b99

    • SHA1

      65be364a6ff127fa4744f45c7c1714258b04977b

    • SHA256

      80eb863912294c6c97fadf4ac51f2753b76920f43114d2037bf0385a3681c000

    • SHA512

      42e81c98206df940ab4592d72e59c6f66aa09b3d105a98b692c806c5e26c1ac2c8d22d25e4f25ed63b8ef4dd440da433023136e01ae22fe84f3bba3c8e964b41

    • SSDEEP

      6144:fBxdJ9yFZ4fbGe6cIzm8BHrLB5Tur+4Ng7dVUU:p1gFZ4fHxQdVU

    Score
    1/10
    behavioral21behavioral22

    • Target

      The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityEngine.Timeline.dll

    • Size

      85KB

    • MD5

      7fbfa3ec080a914ccd3ffe8a22d8f374

    • SHA1

      9712f3961a254d3006a5daad6d3f0512efb92c03

    • SHA256

      8a653ac91ed68e2f5bfc3b2c7f2499b18ff76643236ae61f67d469ba729fe842

    • SHA512

      cb633b3838ca0bbbb72229cbd800b9358e4608a63f5209a9cadc1a6091be8f646921a0d28b30eb5bf70a6bf1f6947e25ddc363f7230624d00eb657bebc35a11c

    • SSDEEP

      1536:s9mlE7GJWwGyFi59wzCcUI3V1m++/Fx0MetnvM3YIKwLh5GHfQRgFitPQIQx5:uL7GJWwLFizwzBG/x0MetnNIKwLh5Gr5

    Score
    1/10
    behavioral23behavioral24

    • Target

      The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityEngine.UI.dll

    • Size

      241KB

    • MD5

      64a4d9e8fabf3680325520681630eafa

    • SHA1

      4b1b7fe23d1d70d9040af281ee1d4d4019635e0a

    • SHA256

      493e88719c21830ef11324b7f0cc269da3065cdc97f27177e60ff556356edbda

    • SHA512

      6d67acb9ca950cbe0cbbe9418821edc566af2a1d1e0edbab252618bad1d77dcdadf91c13e9e40496876f87d01901f8e8aaa56ebcdf5594016b6b11abfda21393

    • SSDEEP

      3072:iSPSHgAoOQ59YY6xET4Y4nSEltcHK0o8y6gtQMn5tn0rnilf4XwFttWL1xxh:yg6xanctcHwQMn5tn0rnilf4gFt01D

    Score
    1/10
    behavioral25behavioral26

    • Target

      The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityEngine.dll

    • Size

      1.6MB

    • MD5

      263ef0d3491170a6a9b4cab7f1602d1b

    • SHA1

      c3252cb69421fb614baa95e16e23c2f6d6371b53

    • SHA256

      cae5b6873d0bb6c978930f9a00ff62791f1a5394bcc0c45a3027483094f09268

    • SHA512

      fe08790d77e816b866b85ae78e4636aa76a2ca081f8927dcbb0ee33274c6dbc530b329fd13fcd24cd2615aae47e238afe92e4f5326fa3fa5c0db38e96c3dc2be

    • SSDEEP

      49152:HUDedtPKgYBlOgy/2ubOhI9R8oXxORdWlqGkFdbLlsNjeQJOtqnUAHbJtH1QfHv/:0DzIEVkx

    Score
    1/10
    behavioral27behavioral28

    • Target

      The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/UnityScript.Lang.dll

    • Size

      13KB

    • MD5

      2c9ffc3d6df007d5137b710c9c5f4692

    • SHA1

      d37059511aa7332addd12f02e247fd3adc62224d

    • SHA256

      2b98680c1dcb2d8764b40722dc21045d451250be233d3a26d0c62f6fdcb52451

    • SHA512

      c7de126e167f7d3f58bbe54c5d56a33f9df47a8d294fd18987c6be44c7a11d4e4e6da93c7d2d39f089467edf46d0404fc23950b7c0d4b8ac2f6a569487e813c5

    • SSDEEP

      384:3TrivxShIt3Bz8I/S0ik0003i4/oLY4mRVf3tn6YH:33AxSyz8I/S0ik000y4Vy

    Score
    1/10
    behavioral29behavioral30

    • Target

      The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/mscorlib.dll

    • Size

      2.4MB

    • MD5

      54a67de565313f9f83823ed92a618b64

    • SHA1

      25966ce38d3be6c99882f9cbdc8464786774073e

    • SHA256

      25fcf4088544c5538534de45462390e03edbb1bf60be2b9b059b87b0f8a767c0

    • SHA512

      44fbbf1c4b7b1a8569d1e450de1fd50cb81b36963cb1cba0b1c13a8ce3d448a056163cee51df0f5e1d56041fcf3c1835f59f59a74a0aff702a0bd0ba873ea25a

    • SSDEEP

      24576:Zpa2qN+0B0/QbghMjgF0UbdRuMQJW26XlaOwkXqURpZM/YO6QSMJ:ZUxPB04bgZ0AlaOwkXqURpZMgO65

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks