Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
54s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
03/10/2022, 08:47
Behavioral task
behavioral1
Sample
24537783b9ce9331ad384869421e48fb6fbea699368b9cf32a7ae672e385b4bb.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
24537783b9ce9331ad384869421e48fb6fbea699368b9cf32a7ae672e385b4bb.dll
Resource
win10v2004-20220812-en
General
-
Target
24537783b9ce9331ad384869421e48fb6fbea699368b9cf32a7ae672e385b4bb.dll
-
Size
57KB
-
MD5
420bcf7e765734319b7c99aa62a4f7b3
-
SHA1
a0053f3755e70adc3e28d99e328aee4fc1296fe6
-
SHA256
24537783b9ce9331ad384869421e48fb6fbea699368b9cf32a7ae672e385b4bb
-
SHA512
6e231e41a977b44f0a93521656190e614b256020ea5fa1a914cb5a5981b1a6e6e8c6bf2b629ba19b01efc223f8f3bada5d12a20331bd8d0bb78511d09834b6f6
-
SSDEEP
1536:VOzB/iUxhu2x2fWKY7oS87M/3Dqjsftvi4E:VK/iuhb2fWKY7oL7s3Dq4G
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 992 wrote to memory of 952 992 rundll32.exe 28 PID 992 wrote to memory of 952 992 rundll32.exe 28 PID 992 wrote to memory of 952 992 rundll32.exe 28 PID 992 wrote to memory of 952 992 rundll32.exe 28 PID 992 wrote to memory of 952 992 rundll32.exe 28 PID 992 wrote to memory of 952 992 rundll32.exe 28 PID 992 wrote to memory of 952 992 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\24537783b9ce9331ad384869421e48fb6fbea699368b9cf32a7ae672e385b4bb.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:992 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\24537783b9ce9331ad384869421e48fb6fbea699368b9cf32a7ae672e385b4bb.dll,#12⤵PID:952
-