Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
1NewVersion...64.exe
windows7-x64
10NewVersion...64.exe
windows10-2004-x64
10NewVersion...pp.dll
windows7-x64
1NewVersion...pp.dll
windows10-2004-x64
1NewVersion...gs.dll
windows7-x64
3NewVersion...gs.dll
windows10-2004-x64
3NewVersion...ps.pdf
windows7-x64
1NewVersion...ps.pdf
windows10-2004-x64
1NewVersion...es.dll
windows7-x64
3NewVersion...es.dll
windows10-2004-x64
3NewVersion...ws.dll
windows7-x64
1NewVersion...ws.dll
windows10-2004-x64
1NewVersion...an.ps1
windows7-x64
1NewVersion...an.ps1
windows10-2004-x64
1NewVersion...an.ps1
windows7-x64
1NewVersion...an.ps1
windows10-2004-x64
1NewVersion...in.dll
windows7-x64
3NewVersion...in.dll
windows10-2004-x64
3NewVersion...ns.dll
windows7-x64
1NewVersion...ns.dll
windows10-2004-x64
1NewVersion...fw.dll
windows7-x64
1NewVersion...fw.dll
windows10-2004-x64
1NewVersion...et.dll
windows7-x64
1NewVersion...et.dll
windows10-2004-x64
1NewVersion...un.dll
windows7-x64
1NewVersion...un.dll
windows10-2004-x64
1Analysis
-
max time kernel
34s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
17/04/2023, 17:54
Static task
static1
Behavioral task
behavioral1
Sample
NewVersionUnlimited/Desktop_Full/Setup_x64.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
NewVersionUnlimited/Desktop_Full/Setup_x64.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
NewVersionUnlimited/Desktop_Full/app.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
NewVersionUnlimited/Desktop_Full/app.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
NewVersionUnlimited/Desktop_Full/configs.dll
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
NewVersionUnlimited/Desktop_Full/configs.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral7
Sample
NewVersionUnlimited/Desktop_Full/locales/props.pdf
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
NewVersionUnlimited/Desktop_Full/locales/props.pdf
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
NewVersionUnlimited/Desktop_Full/modules.dll
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
NewVersionUnlimited/Desktop_Full/modules.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
NewVersionUnlimited/Desktop_Full/platforms/qwindows.dll
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
NewVersionUnlimited/Desktop_Full/platforms/qwindows.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
NewVersionUnlimited/Desktop_Full/res/langs/Hungarian.ps1
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
NewVersionUnlimited/Desktop_Full/res/langs/Hungarian.ps1
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
NewVersionUnlimited/Desktop_Full/res/langs/Korean.ps1
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
NewVersionUnlimited/Desktop_Full/res/langs/Korean.ps1
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
NewVersionUnlimited/Desktop_Full/resources/talpid_openvpn_plugin.dll
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
NewVersionUnlimited/Desktop_Full/resources/talpid_openvpn_plugin.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
NewVersionUnlimited/Desktop_Full/resources/windns.dll
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
NewVersionUnlimited/Desktop_Full/resources/windns.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
NewVersionUnlimited/Desktop_Full/resources/winfw.dll
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
NewVersionUnlimited/Desktop_Full/resources/winfw.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral23
Sample
NewVersionUnlimited/Desktop_Full/resources/winnet.dll
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
NewVersionUnlimited/Desktop_Full/resources/winnet.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
NewVersionUnlimited/Desktop_Full/resources/wintun.dll
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
NewVersionUnlimited/Desktop_Full/resources/wintun.dll
Resource
win10v2004-20230220-en
General
-
Target
NewVersionUnlimited/Desktop_Full/Setup_x64.exe
-
Size
960.0MB
-
MD5
8801c44f20d810411e5015d9bb1cfb01
-
SHA1
0211ae7e82a190097c431cc6aa766bbd6d9cf4a9
-
SHA256
31859d5fe22e7fe5bdcc031c27700fc673f2faa72818f31af70f634e91fcea04
-
SHA512
0d563e9fa5becb8f1bc39e05c91ea51fdd6302d5b41e3e6d893188a065493c0a1e9f81cb4f9d04c5ca424068ac3a7c49c1ae23780e304c51ba2df416a63db3f4
-
SSDEEP
12288:zQG3z3XrM0eByOYtjBoE9k2FJGvnPCsyyceGUZTTDFw8IvD8opkNMf4CMON1:zRz37oYOE9DJmnPCZycUZTTM1kstJ
Malware Config
Signatures
-
Reads user/profile data of local email clients 2 TTPs
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.