Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/10/2022, 20:33

General

  • Target

    d630671b4f52235416353be4ab22d526f329d27c2a464e26ed29b47c904960ab.dll

  • Size

    807KB

  • MD5

    33d7943a59cd5a7b9363f263a5b3ceeb

  • SHA1

    92f6ca4b0350ddd9c025790e224d58c142d84c79

  • SHA256

    d630671b4f52235416353be4ab22d526f329d27c2a464e26ed29b47c904960ab

  • SHA512

    8e985ec5e0749ef9e0ede7b00091d3771ab5588b6675fa871fa4fdf7d08f928b46eab9e792be0f9f64ebf316491b161cda1061c4f4cada576a26260e903cc2d1

  • SSDEEP

    12288:LuWXP0J/0uHPmHyHlZyDSeRrePr44KKavZeyLmY9RRrXkxU4tpxCU+5+Inb:/0J/lZyDSeSWKaZeMfxYvxs

Score
1/10

Malware Config

Signatures

  • Modifies registry class 64 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\d630671b4f52235416353be4ab22d526f329d27c2a464e26ed29b47c904960ab.dll
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1812
    • C:\Windows\SysWOW64\regsvr32.exe
      /s C:\Users\Admin\AppData\Local\Temp\d630671b4f52235416353be4ab22d526f329d27c2a464e26ed29b47c904960ab.dll
      2⤵
      • Modifies registry class
      PID:4444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads