Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

10.exe

windows7-x64

3

10.exe

windows10-2004-x64

3

12DNF小马.exe

windows7-x64

7

12DNF小马.exe

windows10-2004-x64

7

521DNF-HA(新).exe

windows7-x64

1

521DNF-HA(新).exe

windows10-2004-x64

3

DNF掉线�...��.bat

windows7-x64

1

DNF掉线�...��.bat

windows10-2004-x64

7

冒火.dll

windows7-x64

7

冒火.dll

windows10-2004-x64

7

查看最�...��.url

windows7-x64

1

查看最�...��.url

windows10-2004-x64

1

觉醒.dll

windows7-x64

7

觉醒.dll

windows10-2004-x64

7

风暴.dll

windows7-x64

7

风暴.dll

windows10-2004-x64

7

Analysis

  • max time kernel
    162s
  • max time network
    169s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 04:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    521DNF-HA(新).exe

  • Size

    1.6MB

  • MD5

    357e8713bd71c96409b70945507128f2

  • SHA1

    e382581e46e170882d31a2694954f240ba50253b

  • SHA256

    dd0341125e111d1182ba1fba5c034f5b2423458bdf211d1081d541acd1d6d4ff

  • SHA512

    2619274bc024eb7f6ddf0bc75a420ef794c37b187833234dd8af8faaec4b1948a0e795997195202463bdd0130432535676b0b1ed193b7e7156d91d16196ee6e3

  • SSDEEP

    49152:kpJOdoMhVXqOB1evpleM0r/pi0oK506SW:AUHDDvevCMGoU6W

Score
3/10

Malware Config

Signatures

  • Program crash 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\521DNF-HA(新).exe
    "C:\Users\Admin\AppData\Local\Temp\521DNF-HA(新).exe"
    1⤵
      PID:3324
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3324 -s 316
        2⤵
        • Program crash
        PID:1668
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3324 -s 316
        2⤵
        • Program crash
        PID:3384
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3324 -s 332
        2⤵
        • Program crash
        PID:1336
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3324 -ip 3324
      1⤵
        PID:4912
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 3324 -ip 3324
        1⤵
          PID:4900
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3324 -ip 3324
          1⤵
            PID:2096

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/3324-0-0x0000000000400000-0x00000000005E3000-memory.dmp

            Filesize

            1.9MB

            Download

          • memory/3324-2-0x0000000000400000-0x00000000005E3000-memory.dmp

            Filesize

            1.9MB

            Download

          • memory/3324-3-0x00000000023A0000-0x00000000024FD000-memory.dmp

            Filesize

            1.4MB

            Download

          • memory/3324-4-0x0000000000400000-0x00000000005E3000-memory.dmp

            Filesize

            1.9MB

            Download

          • memory/3324-5-0x00000000023A0000-0x00000000024FD000-memory.dmp

            Filesize

            1.4MB

            Download