Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
1NewVersion...64.exe
windows7-x64
10NewVersion...64.exe
windows10-2004-x64
10NewVersion...pp.dll
windows7-x64
1NewVersion...pp.dll
windows10-2004-x64
1NewVersion...gs.dll
windows7-x64
3NewVersion...gs.dll
windows10-2004-x64
3NewVersion...ps.pdf
windows7-x64
1NewVersion...ps.pdf
windows10-2004-x64
1NewVersion...es.dll
windows7-x64
3NewVersion...es.dll
windows10-2004-x64
3NewVersion...ws.dll
windows7-x64
1NewVersion...ws.dll
windows10-2004-x64
1NewVersion...an.ps1
windows7-x64
1NewVersion...an.ps1
windows10-2004-x64
1NewVersion...an.ps1
windows7-x64
1NewVersion...an.ps1
windows10-2004-x64
1NewVersion...in.dll
windows7-x64
3NewVersion...in.dll
windows10-2004-x64
3NewVersion...ns.dll
windows7-x64
1NewVersion...ns.dll
windows10-2004-x64
1NewVersion...fw.dll
windows7-x64
1NewVersion...fw.dll
windows10-2004-x64
1NewVersion...et.dll
windows7-x64
1NewVersion...et.dll
windows10-2004-x64
1NewVersion...un.dll
windows7-x64
1NewVersion...un.dll
windows10-2004-x64
1Analysis
-
max time kernel
141s -
max time network
167s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
17/04/2023, 17:54
Static task
static1
Behavioral task
behavioral1
Sample
NewVersionUnlimited/Desktop_Full/Setup_x64.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
NewVersionUnlimited/Desktop_Full/Setup_x64.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
NewVersionUnlimited/Desktop_Full/app.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
NewVersionUnlimited/Desktop_Full/app.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
NewVersionUnlimited/Desktop_Full/configs.dll
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
NewVersionUnlimited/Desktop_Full/configs.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral7
Sample
NewVersionUnlimited/Desktop_Full/locales/props.pdf
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
NewVersionUnlimited/Desktop_Full/locales/props.pdf
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
NewVersionUnlimited/Desktop_Full/modules.dll
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
NewVersionUnlimited/Desktop_Full/modules.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
NewVersionUnlimited/Desktop_Full/platforms/qwindows.dll
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
NewVersionUnlimited/Desktop_Full/platforms/qwindows.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
NewVersionUnlimited/Desktop_Full/res/langs/Hungarian.ps1
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
NewVersionUnlimited/Desktop_Full/res/langs/Hungarian.ps1
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
NewVersionUnlimited/Desktop_Full/res/langs/Korean.ps1
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
NewVersionUnlimited/Desktop_Full/res/langs/Korean.ps1
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
NewVersionUnlimited/Desktop_Full/resources/talpid_openvpn_plugin.dll
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
NewVersionUnlimited/Desktop_Full/resources/talpid_openvpn_plugin.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
NewVersionUnlimited/Desktop_Full/resources/windns.dll
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
NewVersionUnlimited/Desktop_Full/resources/windns.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
NewVersionUnlimited/Desktop_Full/resources/winfw.dll
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
NewVersionUnlimited/Desktop_Full/resources/winfw.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral23
Sample
NewVersionUnlimited/Desktop_Full/resources/winnet.dll
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
NewVersionUnlimited/Desktop_Full/resources/winnet.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
NewVersionUnlimited/Desktop_Full/resources/wintun.dll
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
NewVersionUnlimited/Desktop_Full/resources/wintun.dll
Resource
win10v2004-20230220-en
General
-
Target
NewVersionUnlimited/Desktop_Full/modules.dll
-
Size
907KB
-
MD5
dc05f0b8f1a32e872721d3486e6332b8
-
SHA1
dbf055b0f934640fadcfaa93971fead8df7a3869
-
SHA256
37ec5f998a5c376d4fcd4342b43a4163d1f043e0f7711e46677cd30013882723
-
SHA512
0f89d713237ef11a1ef8d824ad9767bb13fb4f5f334acdd65af0ba6e54cec4a910398636683254b3fe4d46a069a1781187313684ff827a907b8b968134f6efa0
-
SSDEEP
24576:z0OY4ZFajHYDTR2yfVbf+c6Z5WODYsHh6g3P0zAk75:z0CZFaj4HR2yfVbd6Z5WODYsHh6g3P03
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1328 4280 WerFault.exe 81
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\NewVersionUnlimited\Desktop_Full\modules.dll,#11⤵PID:4280
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4280 -s 3522⤵
- Program crash
PID:1328
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 448 -p 4280 -ip 42801⤵PID:1228