Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2022, 11:14
Static task
static1
Behavioral task
behavioral1
Sample
53e677e99449c61fe2a46f1e84c0300d9e8e23d657dfa8203869c5204f1793d7.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
53e677e99449c61fe2a46f1e84c0300d9e8e23d657dfa8203869c5204f1793d7.dll
Resource
win10v2004-20220812-en
General
-
Target
53e677e99449c61fe2a46f1e84c0300d9e8e23d657dfa8203869c5204f1793d7.dll
-
Size
748KB
-
MD5
b1f098f2646eb8bd38555e959f26c0ad
-
SHA1
3bf25d60d3075c411745cf5a88fa3600594a3c44
-
SHA256
53e677e99449c61fe2a46f1e84c0300d9e8e23d657dfa8203869c5204f1793d7
-
SHA512
d9a2c5c6f702e9a329e17daf8d8537e55e94643a60471153edb6b89c0a3c8e656769037bd80d7e33ecf7f8ecd9b5e91d4973cd54fdd6610dd7857ec78d6b25ad
-
SSDEEP
12288:cgXUZy8C9PCjjBjkJtCr0Uwc2h0OBBTISqfTzebIAKVpRXqv9savt7:V/9OBjkJYoUpkT3qfXebIAA+v9sE
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 3612 wrote to memory of 516 3612 rundll32.exe 79 PID 3612 wrote to memory of 516 3612 rundll32.exe 79 PID 3612 wrote to memory of 516 3612 rundll32.exe 79
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\53e677e99449c61fe2a46f1e84c0300d9e8e23d657dfa8203869c5204f1793d7.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:3612 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\53e677e99449c61fe2a46f1e84c0300d9e8e23d657dfa8203869c5204f1793d7.dll,#12⤵PID:516
-