Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    151s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/10/2023, 04:07

General

  • Target

    NEW ORDER--GO23B005840.exe

  • Size

    802KB

  • MD5

    44c4b20bb49166936e7aa375852c9e9c

  • SHA1

    e804be6592df45c34c675a6b3ebece24d5a9cc16

  • SHA256

    62c4a1fafc66fd389428f73ef74c2e7309ebd3be53eeb934a8a447fa51ee253b

  • SHA512

    b06f336c9b9c09b30e84778227ad0ef667c611202766db4ca7c51e1c90780608534666699a1f712e8eae7096cfa3f0f28228739e2e9db42c56d2b6ba694f1274

  • SSDEEP

    12288:RwLJR9C9IaL10Md+GIQ5IcziVYsHFC9QGzlWZC2b7WrEFl:RwLjxaGMd3INczeHM95MZC22rw

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEW ORDER--GO23B005840.exe
    "C:\Users\Admin\AppData\Local\Temp\NEW ORDER--GO23B005840.exe"
    1⤵
      PID:3540
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3540 -s 1092
        2⤵
        • Program crash
        PID:3456
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3540 -ip 3540
      1⤵
        PID:4392

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3540-0-0x0000000074AB0000-0x0000000075260000-memory.dmp

        Filesize

        7.7MB

      • memory/3540-1-0x0000000000FB0000-0x0000000001080000-memory.dmp

        Filesize

        832KB

      • memory/3540-2-0x0000000074AB0000-0x0000000075260000-memory.dmp

        Filesize

        7.7MB

      • memory/3540-3-0x0000000005BA0000-0x0000000005BB0000-memory.dmp

        Filesize

        64KB

      • memory/3540-4-0x0000000005960000-0x000000000596E000-memory.dmp

        Filesize

        56KB

      • memory/3540-5-0x0000000005C50000-0x0000000005CE2000-memory.dmp

        Filesize

        584KB

      • memory/3540-6-0x0000000005BA0000-0x0000000005BB0000-memory.dmp

        Filesize

        64KB

      • memory/3540-7-0x0000000005980000-0x000000000598A000-memory.dmp

        Filesize

        40KB

      • memory/3540-8-0x0000000074AB0000-0x0000000075260000-memory.dmp

        Filesize

        7.7MB