Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
70FF1C3 202...ll.exe
windows7-x64
70FF1C3 202...ll.exe
windows10-2004-x64
0FF1C3 202...up.exe
windows7-x64
10FF1C3 202...up.exe
windows10-2004-x64
70FF1C3 202...pp.exe
windows7-x64
10FF1C3 202...pp.exe
windows10-2004-x64
10FF1C3 202...00.dll
windows7-x64
30FF1C3 202...00.dll
windows10-2004-x64
30FF1C3 202...pp.exe
windows7-x64
10FF1C3 202...pp.exe
windows10-2004-x64
10FF1C3 202...00.dll
windows7-x64
30FF1C3 202...00.dll
windows10-2004-x64
3Analysis
-
max time kernel
30s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
22/03/2023, 14:46
Behavioral task
behavioral1
Sample
0FF1C3 2021 - by Diekrolo/M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M/OInstall.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0FF1C3 2021 - by Diekrolo/M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M/OInstall.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
0FF1C3 2021 - by Diekrolo/M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M/files/setup.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
0FF1C3 2021 - by Diekrolo/M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M/files/setup.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
0FF1C3 2021 - by Diekrolo/M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M/files/x64/cleanospp.exe
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
0FF1C3 2021 - by Diekrolo/M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M/files/x64/cleanospp.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
0FF1C3 2021 - by Diekrolo/M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M/files/x64/msvcr100.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
0FF1C3 2021 - by Diekrolo/M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M/files/x64/msvcr100.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral9
Sample
0FF1C3 2021 - by Diekrolo/M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M/files/x86/cleanospp.exe
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
0FF1C3 2021 - by Diekrolo/M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M/files/x86/cleanospp.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
0FF1C3 2021 - by Diekrolo/M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M/files/x86/msvcr100.dll
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
0FF1C3 2021 - by Diekrolo/M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M/files/x86/msvcr100.dll
Resource
win10v2004-20230220-en
General
-
Target
0FF1C3 2021 - by Diekrolo/M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M/files/x64/msvcr100.dll
-
Size
809KB
-
MD5
df3ca8d16bded6a54977b30e66864d33
-
SHA1
b7b9349b33230c5b80886f5c1f0a42848661c883
-
SHA256
1d1a1ae540ba132f998d60d3622f0297b6e86ae399332c3b47462d7c0f560a36
-
SHA512
951b2f67c2f2ef1cfcd4b43bd3ee0e486cdba7d04b4ea7259df0e4b3112e360aefb8dcd058becccacd99aca7f56d4f9bd211075bd16b28c2661d562e50b423f0
-
SSDEEP
12288:3gzGPEett9Mw9HfBCddjMb2NQVmTW752fmyyKWeHQGokozS:QzJetPMw9HfBCrMb2Kc6ymyyKWewGzUS
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 628 1740 WerFault.exe 27 -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1740 wrote to memory of 628 1740 rundll32.exe 28 PID 1740 wrote to memory of 628 1740 rundll32.exe 28 PID 1740 wrote to memory of 628 1740 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\0FF1C3 2021 - by Diekrolo\M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M\files\x64\msvcr100.dll",#11⤵
- Suspicious use of WriteProcessMemory
PID:1740 -
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1740 -s 842⤵
- Program crash
PID:628
-