Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
14/10/2023, 04:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEW ORDER--GO23B005840.exe
Resource
win7-20230831-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEW ORDER--GO23B005840.exe
Resource
win10v2004-20230915-en
1 signatures
150 seconds
General
-
Target
NEW ORDER--GO23B005840.exe
-
Size
802KB
-
MD5
44c4b20bb49166936e7aa375852c9e9c
-
SHA1
e804be6592df45c34c675a6b3ebece24d5a9cc16
-
SHA256
62c4a1fafc66fd389428f73ef74c2e7309ebd3be53eeb934a8a447fa51ee253b
-
SHA512
b06f336c9b9c09b30e84778227ad0ef667c611202766db4ca7c51e1c90780608534666699a1f712e8eae7096cfa3f0f28228739e2e9db42c56d2b6ba694f1274
-
SSDEEP
12288:RwLJR9C9IaL10Md+GIQ5IcziVYsHFC9QGzlWZC2b7WrEFl:RwLjxaGMd3INczeHM95MZC22rw
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3456 3540 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEW ORDER--GO23B005840.exe"C:\Users\Admin\AppData\Local\Temp\NEW ORDER--GO23B005840.exe"1⤵PID:3540
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3540 -s 10922⤵
- Program crash
PID:3456
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3540 -ip 35401⤵PID:4392