Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
1猪八戒�...cx.lnk
windows7-x64
10猪八戒�...cx.lnk
windows10-2004-x64
10猪八戒�...33.vbs
windows7-x64
10猪八戒�...33.vbs
windows10-2004-x64
10猪八戒�...es.dll
windows7-x64
3猪八戒�...es.dll
windows10-2004-x64
3猪八戒�.../pp.py
windows7-x64
3猪八戒�.../pp.py
windows10-2004-x64
3猪八戒�...on.exe
windows7-x64
1猪八戒�...on.exe
windows10-2004-x64
1猪八戒�...37.dll
windows7-x64
3猪八戒�...37.dll
windows10-2004-x64
3猪八戒�...�.docx
windows7-x64
4猪八戒�...�.docx
windows10-2004-x64
1Analysis
-
max time kernel
142s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
16/08/2023, 07:52
Static task
static1
Behavioral task
behavioral1
Sample
猪八戒股份有限公司-需求/猪八戒股份有限公司-需求.docx.lnk
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
猪八戒股份有限公司-需求/猪八戒股份有限公司-需求.docx.lnk
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/333.vbs
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/333.vbs
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/_ctypes.dll
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/_ctypes.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/pp.py
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/pp.py
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/python.exe
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/python.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/python37.dll
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/python37.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/猪八戒股份有限公司需求.docx
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/猪八戒股份有限公司需求.docx
Resource
win10v2004-20230703-en
General
-
Target
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/python37.dll
-
Size
3.6MB
-
MD5
d558d4db5a6bd29a8b60b8aa46e5329a
-
SHA1
a5036009de7165b1b4721263eae4b240ee689095
-
SHA256
1cfdd40a9107d89310e4e3b6df5f25f26944b312e61638d014f1b1a8050ccc07
-
SHA512
5590fbd6c9c81293b21e9da9d35d5177f03ba3d247771e4abef3420420d9024f3a775796d73becd5aeb469df648d3105a016693c6b8f68e8c61399212439eebf
-
SSDEEP
49152:1TeuSWg7sxvzSxFHYxcim9kOTl8MiYGYwjy9x6xN2BjXISsOIjbXH3EM6nPP8MTj:dcdOMiY+yXCNnjTHUM68wsNyPH
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1276 992 WerFault.exe 71
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\猪八戒股份有限公司-需求\营业执照\.__MACOS__\.__MACOS__\._MACOS_\python37.dll,#11⤵PID:992
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 992 -s 3842⤵
- Program crash
PID:1276
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 992 -ip 9921⤵PID:5056