Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
112s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
12/10/2022, 14:21
Static task
static1
Behavioral task
behavioral1
Sample
6cc933e216bd55affbe07bb3bafe450a34569acd2d9c0e0e901cfe4188bfe2e9.dll
Resource
win7-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
6cc933e216bd55affbe07bb3bafe450a34569acd2d9c0e0e901cfe4188bfe2e9.dll
Resource
win10v2004-20220901-en
1 signatures
150 seconds
General
-
Target
6cc933e216bd55affbe07bb3bafe450a34569acd2d9c0e0e901cfe4188bfe2e9.dll
-
Size
3KB
-
MD5
69f043cb7a8b6ad9803c29fa87a52d49
-
SHA1
1bcc0aff98babdcda678e4b56482e3865f07f4e6
-
SHA256
6cc933e216bd55affbe07bb3bafe450a34569acd2d9c0e0e901cfe4188bfe2e9
-
SHA512
0389af5f41b06882e238f0a8f91d46f49d1d38ce7b3747bf54185a419795fb77970b17d5038473c4ac849310fbe0f10e01a5e4e48c418613e19f73e301d4c60f
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 864 wrote to memory of 4208 864 rundll32.exe 85 PID 864 wrote to memory of 4208 864 rundll32.exe 85 PID 864 wrote to memory of 4208 864 rundll32.exe 85
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\6cc933e216bd55affbe07bb3bafe450a34569acd2d9c0e0e901cfe4188bfe2e9.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:864 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\6cc933e216bd55affbe07bb3bafe450a34569acd2d9c0e0e901cfe4188bfe2e9.dll,#12⤵PID:4208
-