Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
710.exe
windows7-x64
310.exe
windows10-2004-x64
312DNF小马.exe
windows7-x64
712DNF小马.exe
windows10-2004-x64
7521DNF-HA(新).exe
windows7-x64
1521DNF-HA(新).exe
windows10-2004-x64
3DNF掉线�...��.bat
windows7-x64
1DNF掉线�...��.bat
windows10-2004-x64
7冒火.dll
windows7-x64
7冒火.dll
windows10-2004-x64
7查看最�...��.url
windows7-x64
1查看最�...��.url
windows10-2004-x64
1觉醒.dll
windows7-x64
7觉醒.dll
windows10-2004-x64
7风暴.dll
windows7-x64
7风暴.dll
windows10-2004-x64
7Analysis
-
max time kernel
164s -
max time network
173s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 04:17
Behavioral task
behavioral1
Sample
10.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
10.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
12DNF小马.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
12DNF小马.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
521DNF-HA(新).exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
521DNF-HA(新).exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
DNF掉线数据清理1.3版.bat
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
DNF掉线数据清理1.3版.bat
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
冒火.dll
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
冒火.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
查看最新代码.url
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
查看最新代码.url
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
觉醒.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
觉醒.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
风暴.dll
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
风暴.dll
Resource
win10v2004-20231215-en
General
-
Target
10.exe
-
Size
23KB
-
MD5
7d37085597cbb581e7f16f3ce86704f7
-
SHA1
7d2105b07c191eb59aeb9b79d1381eeebb5da634
-
SHA256
2fec88c49d917361318ba9b844ed2ef24e9bfef5522308b2438dc4b5e36f1253
-
SHA512
2aaf2cccf09a47a872f0373a8bb48e9d694192238ac26a5df22e4cc41c0ee2246748ccfa5577ee387700131f497bceb7729dc6b927695501344fb9b87a7963ca
-
SSDEEP
384:FwA6K73YQaBM5oFIyduoqCG1L4gzjAzk6KuJrGSE5p7Hlv:FamIQaBioFIauoqCWQvBE5pzlv
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1392 2760 WerFault.exe 19
Processes
-
C:\Users\Admin\AppData\Local\Temp\10.exe"C:\Users\Admin\AppData\Local\Temp\10.exe"1⤵PID:2760
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2760 -s 2242⤵
- Program crash
PID:1392
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2760 -ip 27601⤵PID:1776