Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
5Static
static
1IMG_1129_O...er.exe
windows7-x64
1IMG_1129_O...er.exe
windows10-2004-x64
1SevenZipSharp.dll
windows7-x64
1SevenZipSharp.dll
windows10-2004-x64
1WDGoogleAnalytics.dll
windows7-x64
1WDGoogleAnalytics.dll
windows10-2004-x64
1WDLocale.dll
windows7-x64
1WDLocale.dll
windows10-2004-x64
1WDLog.dll
windows7-x64
1WDLog.dll
windows10-2004-x64
1WDManifest.dll
windows7-x64
1WDManifest.dll
windows10-2004-x64
1WDOrionAPI.dll
windows7-x64
1WDOrionAPI.dll
windows10-2004-x64
1WDSync.dll
windows7-x64
1WDSync.dll
windows10-2004-x64
1WDSyncConf...on.dll
windows7-x64
1WDSyncConf...on.dll
windows10-2004-x64
1WDSyncCont...er.dll
windows7-x64
1WDSyncCont...er.dll
windows10-2004-x64
1WDSyncData...ts.dll
windows7-x64
1WDSyncData...ts.dll
windows10-2004-x64
1WDTransport.dll
windows7-x64
1WDTransport.dll
windows10-2004-x64
5WDUPnP.dll
windows7-x64
1WDUPnP.dll
windows10-2004-x64
1WDUtilities.dll
windows7-x64
1WDUtilities.dll
windows10-2004-x64
1WDz.dll
windows7-x64
3WDz.dll
windows10-2004-x64
3Analysis
-
max time kernel
1554s -
max time network
1593s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
14/02/2023, 06:53
Static task
static1
Behavioral task
behavioral1
Sample
IMG_1129_One_Night_Stand_Shen_Zhi - Dang_Dae_Hyun_Studio - By_Dook_Man_Shik_Photographer.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
IMG_1129_One_Night_Stand_Shen_Zhi - Dang_Dae_Hyun_Studio - By_Dook_Man_Shik_Photographer.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
SevenZipSharp.dll
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
SevenZipSharp.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
WDGoogleAnalytics.dll
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
WDGoogleAnalytics.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
WDLocale.dll
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
WDLocale.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
WDLog.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
WDLog.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
WDManifest.dll
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
WDManifest.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
WDOrionAPI.dll
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
WDOrionAPI.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
WDSync.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
WDSync.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
WDSyncConfiguration.dll
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
WDSyncConfiguration.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
WDSyncContextMenuHandler.dll
Resource
win7-20220901-en
Behavioral task
behavioral20
Sample
WDSyncContextMenuHandler.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
WDSyncDataContracts.dll
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
WDSyncDataContracts.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral23
Sample
WDTransport.dll
Resource
win7-20221111-en
Behavioral task
behavioral24
Sample
WDTransport.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
WDUPnP.dll
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
WDUPnP.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
WDUtilities.dll
Resource
win7-20221111-en
Behavioral task
behavioral28
Sample
WDUtilities.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral29
Sample
WDz.dll
Resource
win7-20220812-en
Behavioral task
behavioral30
Sample
WDz.dll
Resource
win10v2004-20221111-en
General
-
Target
WDz.dll
-
Size
1.7MB
-
MD5
bbf51226a8670475f283a2d57460d46c
-
SHA1
6388883ced0ce14ede20c7798338673ff8d6204a
-
SHA256
73578f14d50f747efa82527a503f1ad542f9db170e2901eddb54d6bce93fc00e
-
SHA512
f68eb9c4ba0d923082107cff2f0e7f78e80be243b9d92cfab7298f59461fcca2c5c944d4577f161f11a2011c0958a3c32896eba4f0e89cd9f8aed97ab5bc74f9
-
SSDEEP
24576:fznngr4eig/HxkaoDFITvg9iLXYgIcjWBzb139EOapmYp:fz64gxnoRGI9MXFrjWLNEOapmYp
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3140 2024 WerFault.exe 79
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\WDz.dll,#11⤵PID:2024
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2024 -s 3482⤵
- Program crash
PID:3140
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 428 -p 2024 -ip 20241⤵PID:4160