Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
1NewVersion...64.exe
windows7-x64
10NewVersion...64.exe
windows10-2004-x64
10NewVersion...pp.dll
windows7-x64
1NewVersion...pp.dll
windows10-2004-x64
1NewVersion...gs.dll
windows7-x64
3NewVersion...gs.dll
windows10-2004-x64
3NewVersion...ps.pdf
windows7-x64
1NewVersion...ps.pdf
windows10-2004-x64
1NewVersion...es.dll
windows7-x64
3NewVersion...es.dll
windows10-2004-x64
3NewVersion...ws.dll
windows7-x64
1NewVersion...ws.dll
windows10-2004-x64
1NewVersion...an.ps1
windows7-x64
1NewVersion...an.ps1
windows10-2004-x64
1NewVersion...an.ps1
windows7-x64
1NewVersion...an.ps1
windows10-2004-x64
1NewVersion...in.dll
windows7-x64
3NewVersion...in.dll
windows10-2004-x64
3NewVersion...ns.dll
windows7-x64
1NewVersion...ns.dll
windows10-2004-x64
1NewVersion...fw.dll
windows7-x64
1NewVersion...fw.dll
windows10-2004-x64
1NewVersion...et.dll
windows7-x64
1NewVersion...et.dll
windows10-2004-x64
1NewVersion...un.dll
windows7-x64
1NewVersion...un.dll
windows10-2004-x64
1Analysis
-
max time kernel
49s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
17/04/2023, 17:54
Static task
static1
Behavioral task
behavioral1
Sample
NewVersionUnlimited/Desktop_Full/Setup_x64.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
NewVersionUnlimited/Desktop_Full/Setup_x64.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
NewVersionUnlimited/Desktop_Full/app.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
NewVersionUnlimited/Desktop_Full/app.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
NewVersionUnlimited/Desktop_Full/configs.dll
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
NewVersionUnlimited/Desktop_Full/configs.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral7
Sample
NewVersionUnlimited/Desktop_Full/locales/props.pdf
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
NewVersionUnlimited/Desktop_Full/locales/props.pdf
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
NewVersionUnlimited/Desktop_Full/modules.dll
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
NewVersionUnlimited/Desktop_Full/modules.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
NewVersionUnlimited/Desktop_Full/platforms/qwindows.dll
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
NewVersionUnlimited/Desktop_Full/platforms/qwindows.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
NewVersionUnlimited/Desktop_Full/res/langs/Hungarian.ps1
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
NewVersionUnlimited/Desktop_Full/res/langs/Hungarian.ps1
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
NewVersionUnlimited/Desktop_Full/res/langs/Korean.ps1
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
NewVersionUnlimited/Desktop_Full/res/langs/Korean.ps1
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
NewVersionUnlimited/Desktop_Full/resources/talpid_openvpn_plugin.dll
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
NewVersionUnlimited/Desktop_Full/resources/talpid_openvpn_plugin.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
NewVersionUnlimited/Desktop_Full/resources/windns.dll
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
NewVersionUnlimited/Desktop_Full/resources/windns.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
NewVersionUnlimited/Desktop_Full/resources/winfw.dll
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
NewVersionUnlimited/Desktop_Full/resources/winfw.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral23
Sample
NewVersionUnlimited/Desktop_Full/resources/winnet.dll
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
NewVersionUnlimited/Desktop_Full/resources/winnet.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
NewVersionUnlimited/Desktop_Full/resources/wintun.dll
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
NewVersionUnlimited/Desktop_Full/resources/wintun.dll
Resource
win10v2004-20230220-en
General
-
Target
NewVersionUnlimited/Desktop_Full/configs.dll
-
Size
471KB
-
MD5
ee220e800cb5af38e60f26b51999b105
-
SHA1
194c0891d7a9cec5fd8f4af5e9dd9ef28a967053
-
SHA256
08430abbc4eabd0615f42286038bac373f24ac8fe1117b2e304428bab7e143fd
-
SHA512
b776e9457f5ccf367aecf0816152602c5bfc206322d7e1134a2fd23673d51c4427a4b54fe35f4079c6470c06d2bfadd2b1ef5541dde7ea1f17be842d184978a8
-
SSDEEP
6144:/KK400WTwtX+fGPufBERUtk+Q4kiwoF0YG+L2Wf/xLu6:/5fiufqeBEHgGpY2Wf/dL
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1604 1792 WerFault.exe 23
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\NewVersionUnlimited\Desktop_Full\configs.dll,#11⤵PID:1792
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1792 -s 3362⤵
- Program crash
PID:1604
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 464 -p 1792 -ip 17921⤵PID:1444