Overview
overview
7Static
static
3Clash Verg...up.exe
windows10-2004-x64
7Clash Verg...up.exe
windows11-21h2-x64
7$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-21h2-x64
3$PLUGINSDI...SC.dll
windows10-2004-x64
3$PLUGINSDI...SC.dll
windows11-21h2-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-21h2-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-21h2-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-21h2-x64
3$TEMP/Micr...up.exe
windows10-2004-x64
6$TEMP/Micr...up.exe
windows11-21h2-x64
6clash-verge.exe
windows10-2004-x64
6clash-verge.exe
windows11-21h2-x64
6resources/...ervice
macos-10.15-amd64
4resources/...nstall
macos-10.15-amd64
4resources/...ll.exe
windows10-2004-x64
1resources/...ll.exe
windows11-21h2-x64
4resources/...nstall
macos-10.15-amd64
4resources/...ll.exe
windows10-2004-x64
1resources/...ll.exe
windows11-21h2-x64
1resources/...ce.exe
windows10-2004-x64
1resources/...ce.exe
windows11-21h2-x64
1resources/...ck.exe
windows10-2004-x64
7Analysis
- max time kernel
149s - max time network
96s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
31/05/2026, 00:16
Static task
static1
Behavioral task
behavioral1
Sample
Clash Verge_2.4.7_x64-setup.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Clash Verge_2.4.7_x64-setup.exe
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral7
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral9
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral19
Sample
$TEMP/MicrosoftEdgeWebview2Setup.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
$TEMP/MicrosoftEdgeWebview2Setup.exe
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral21
Sample
clash-verge.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
clash-verge.exe
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral23
Sample
resources/clash-verge-service
Resource
macos-20250619-en
macos-10.15-amd64
Behavioral task
behavioral24
Sample
resources/clash-verge-service-install
Resource
macos-20250619-en
macos-10.15-amd64
Behavioral task
behavioral25
Sample
resources/clash-verge-service-install.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
resources/clash-verge-service-install.exe
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral27
Sample
resources/clash-verge-service-uninstall
Resource
macos-20250619-en
macos-10.15-amd64
Behavioral task
behavioral28
Sample
resources/clash-verge-service-uninstall.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
resources/clash-verge-service-uninstall.exe
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral30
Sample
resources/clash-verge-service.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
resources/clash-verge-service.exe
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral32
Sample
resources/enableLoopback.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
General
- Target resources/clash-verge-service-install.exe
- Size 171KB
- Sample260531-akt3faft21
- SHA256 ea73082094d12a0782389667b9a608ceed3814df442eed25ba9b56820d0a1a1d
- MD5 9da7abf96be07992d516ccaa42bc8537
- SHA1 839cc4df0d2bebfd6125f55af564b71473fee313
- SHA512 0a9d5fe23afa31efd517af3857f040411815dee8b70c48263a97fe65d395c1c0a5f16e88a15ef0340695e9c68e26422433d2414da58b37bf0897c41b20ceb3e3
- SSDEEP 1536:TWNPqB+pv9M1Qn0/OVCZPfht5mpjDI2Xw6jwUz5m9JuUH1snVYtEXsxvy9ZtYkwW:TWNnpjnluhDOnIx6fVUH0XsxuZ+8JB
- TLSH T1A7044B63FA5691FCD45AC078C3159563BA77B8C90F2269FF026512383E69EE17F38A10
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Drops file in Windows directory 2 IoCs
description ioc Process File created C:\Windows\SystemTemp\clash-verge-service\clash-verge-service.owner.lock clash-verge-service.exe File opened for modification C:\Windows\SystemTemp\clash-verge-service\clash-verge-service.pid clash-verge-service.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\resources\clash-verge-service-install.exe"C:\Users\Admin\AppData\Local\Temp\resources\clash-verge-service-install.exe"1⤵PID:4092
-
C:\Users\Admin\AppData\Local\Temp\resources\clash-verge-service.exeC:\Users\Admin\AppData\Local\Temp\resources\clash-verge-service.exe1⤵
- Drops file in Windows directory
PID:1812