Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
1UnparkCPU ...aR.rar
windows7-x64
3UnparkCPU ...aR.rar
windows10-2004-x64
3Suscribete...il.dll
windows7-x64
1Suscribete...il.dll
windows10-2004-x64
1Suscribete...er.dll
windows7-x64
1Suscribete...er.dll
windows10-2004-x64
1Suscribete...PU.exe
windows7-x64
1Suscribete...PU.exe
windows10-2004-x64
1Suscribete...st.exe
windows7-x64
3Suscribete...st.exe
windows10-2004-x64
3Suscribete...nifest
windows7-x64
3Suscribete...nifest
windows10-2004-x64
3Analysis
-
max time kernel
100s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
27/03/2023, 10:07
Static task
static1
Behavioral task
behavioral1
Sample
UnparkCPU - KuasaR.rar
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
UnparkCPU - KuasaR.rar
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Suscribete a KuasaR/Unpark CPU/Interop.MSUtil.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Suscribete a KuasaR/Unpark CPU/Interop.MSUtil.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral5
Sample
Suscribete a KuasaR/Unpark CPU/LogParser.dll
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
Suscribete a KuasaR/Unpark CPU/LogParser.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
Suscribete a KuasaR/Unpark CPU/UnparkCPU.exe
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
Suscribete a KuasaR/Unpark CPU/UnparkCPU.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
Suscribete a KuasaR/Unpark CPU/UnparkCPU.vshost.exe
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
Suscribete a KuasaR/Unpark CPU/UnparkCPU.vshost.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
Suscribete a KuasaR/Unpark CPU/UnparkCPU.vshost.exe.manifest
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
Suscribete a KuasaR/Unpark CPU/UnparkCPU.vshost.exe.manifest
Resource
win10v2004-20230221-en
General
-
Target
Suscribete a KuasaR/Unpark CPU/UnparkCPU.vshost.exe
-
Size
11KB
-
MD5
02be6d33b1edbc61c79882d3f556bd8a
-
SHA1
8d0afa78893ae5f04e505db0d76d0d50cf34e7da
-
SHA256
4c9f9b9de2ffeea9ccc6524d05ea5b78a14c1642cecc189fe40e7a57a6c294b3
-
SHA512
39949d9a14a17d7cf31aa222a6547be7663673872d5091a77c64b0cd863e399dcdfbff70443bc9a2c2dccc658a998afc5189469723bb5f4c8adeecab47b07967
-
SSDEEP
192:LzoWn3xB1BfWKnWZQKPnEtObMacxc8hjeyveCf0pnvC:ZhNfWKnWZLXci2jpv8vC
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 956 368 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\Suscribete a KuasaR\Unpark CPU\UnparkCPU.vshost.exe"C:\Users\Admin\AppData\Local\Temp\Suscribete a KuasaR\Unpark CPU\UnparkCPU.vshost.exe"1⤵PID:368
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 368 -s 8042⤵
- Program crash
PID:956
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 368 -ip 3681⤵PID:1748