Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
1NewVersion...64.exe
windows7-x64
10NewVersion...64.exe
windows10-2004-x64
10NewVersion...pp.dll
windows7-x64
1NewVersion...pp.dll
windows10-2004-x64
1NewVersion...gs.dll
windows7-x64
3NewVersion...gs.dll
windows10-2004-x64
3NewVersion...ps.pdf
windows7-x64
1NewVersion...ps.pdf
windows10-2004-x64
1NewVersion...es.dll
windows7-x64
3NewVersion...es.dll
windows10-2004-x64
3NewVersion...ws.dll
windows7-x64
1NewVersion...ws.dll
windows10-2004-x64
1NewVersion...an.ps1
windows7-x64
1NewVersion...an.ps1
windows10-2004-x64
1NewVersion...an.ps1
windows7-x64
1NewVersion...an.ps1
windows10-2004-x64
1NewVersion...in.dll
windows7-x64
3NewVersion...in.dll
windows10-2004-x64
3NewVersion...ns.dll
windows7-x64
1NewVersion...ns.dll
windows10-2004-x64
1NewVersion...fw.dll
windows7-x64
1NewVersion...fw.dll
windows10-2004-x64
1NewVersion...et.dll
windows7-x64
1NewVersion...et.dll
windows10-2004-x64
1NewVersion...un.dll
windows7-x64
1NewVersion...un.dll
windows10-2004-x64
1Analysis
-
max time kernel
0s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
17/04/2023, 17:54
Static task
static1
Behavioral task
behavioral1
Sample
NewVersionUnlimited/Desktop_Full/Setup_x64.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
NewVersionUnlimited/Desktop_Full/Setup_x64.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
NewVersionUnlimited/Desktop_Full/app.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
NewVersionUnlimited/Desktop_Full/app.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
NewVersionUnlimited/Desktop_Full/configs.dll
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
NewVersionUnlimited/Desktop_Full/configs.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral7
Sample
NewVersionUnlimited/Desktop_Full/locales/props.pdf
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
NewVersionUnlimited/Desktop_Full/locales/props.pdf
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
NewVersionUnlimited/Desktop_Full/modules.dll
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
NewVersionUnlimited/Desktop_Full/modules.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
NewVersionUnlimited/Desktop_Full/platforms/qwindows.dll
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
NewVersionUnlimited/Desktop_Full/platforms/qwindows.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
NewVersionUnlimited/Desktop_Full/res/langs/Hungarian.ps1
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
NewVersionUnlimited/Desktop_Full/res/langs/Hungarian.ps1
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
NewVersionUnlimited/Desktop_Full/res/langs/Korean.ps1
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
NewVersionUnlimited/Desktop_Full/res/langs/Korean.ps1
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
NewVersionUnlimited/Desktop_Full/resources/talpid_openvpn_plugin.dll
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
NewVersionUnlimited/Desktop_Full/resources/talpid_openvpn_plugin.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
NewVersionUnlimited/Desktop_Full/resources/windns.dll
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
NewVersionUnlimited/Desktop_Full/resources/windns.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
NewVersionUnlimited/Desktop_Full/resources/winfw.dll
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
NewVersionUnlimited/Desktop_Full/resources/winfw.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral23
Sample
NewVersionUnlimited/Desktop_Full/resources/winnet.dll
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
NewVersionUnlimited/Desktop_Full/resources/winnet.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
NewVersionUnlimited/Desktop_Full/resources/wintun.dll
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
NewVersionUnlimited/Desktop_Full/resources/wintun.dll
Resource
win10v2004-20230220-en
General
-
Target
NewVersionUnlimited/Desktop_Full/configs.dll
-
Size
471KB
-
MD5
ee220e800cb5af38e60f26b51999b105
-
SHA1
194c0891d7a9cec5fd8f4af5e9dd9ef28a967053
-
SHA256
08430abbc4eabd0615f42286038bac373f24ac8fe1117b2e304428bab7e143fd
-
SHA512
b776e9457f5ccf367aecf0816152602c5bfc206322d7e1134a2fd23673d51c4427a4b54fe35f4079c6470c06d2bfadd2b1ef5541dde7ea1f17be842d184978a8
-
SSDEEP
6144:/KK400WTwtX+fGPufBERUtk+Q4kiwoF0YG+L2Wf/xLu6:/5fiufqeBEHgGpY2Wf/dL
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1500 936 WerFault.exe 26 -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 936 wrote to memory of 1500 936 rundll32.exe 27 PID 936 wrote to memory of 1500 936 rundll32.exe 27 PID 936 wrote to memory of 1500 936 rundll32.exe 27