Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
126s -
max time network
171s -
platform
windows7_x64 -
resource
win7v20210410 -
submitted
06/07/2021, 23:40
Static task
static1
Behavioral task
behavioral1
Sample
4c3499f3cc4a4fdc7e67417e055891c78540282dccc57e37a01167dfe351b244.dll
Resource
win7v20210410
0 signatures
0 seconds
General
-
Target
4c3499f3cc4a4fdc7e67417e055891c78540282dccc57e37a01167dfe351b244.dll
-
Size
453KB
-
MD5
56018500f73e3f6cf179d3b853c27912
-
SHA1
a3060a3efb9ac3da444ef8abc99143293076fe32
-
SHA256
4c3499f3cc4a4fdc7e67417e055891c78540282dccc57e37a01167dfe351b244
-
SHA512
730586717c13d19c4141ce1b44a6e91bcfe4deac8c99eb438d452c965c0b5adac4b2b68da04ad6abc6900bcc410d1801e448831903a8265f3b370896434d8f8e
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
description pid Process Token: 33 396 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 396 AUDIODG.EXE Token: 33 396 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 396 AUDIODG.EXE
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\4c3499f3cc4a4fdc7e67417e055891c78540282dccc57e37a01167dfe351b244.dll,#11⤵PID:1752
-
C:\Windows\system32\cmd.exe"C:\Windows\system32\cmd.exe"1⤵PID:1800
-
C:\Windows\explorer.exe"C:\Windows\explorer.exe"1⤵PID:1064
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x2f01⤵
- Suspicious use of AdjustPrivilegeToken
PID:396
-
C:\Windows\system32\DeviceDisplayObjectProvider.exeC:\Windows\system32\DeviceDisplayObjectProvider.exe -Embedding1⤵PID:1008
-
C:\Windows\system32\control.exe"C:\Windows\system32\control.exe" /name Microsoft.DefaultPrograms1⤵PID:1256
-
C:\Windows\SysWOW64\DllHost.exeC:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}1⤵PID:1876