Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
0s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
16/10/2022, 15:45
Static task
static1
Behavioral task
behavioral1
Sample
Details.lnk
Resource
win7-20220812-en
10 signatures
30 seconds
Behavioral task
behavioral2
Sample
XLojGEhKNSWWGb.bat
Resource
win7-20220812-en
9 signatures
30 seconds
Behavioral task
behavioral3
Sample
uOAxPaiprCVzvn.dll
Resource
win7-20220812-en
2 signatures
30 seconds
General
-
Target
uOAxPaiprCVzvn.dll
-
Size
3.6MB
-
MD5
60658cdb2f273a1a9c18ee8ff5118112
-
SHA1
d4665150bec840c6e8be62c2c6cdebc42ef5ea19
-
SHA256
ded7c0c21ca7f16e70ed2b1a774bab54019d6b3fb865677eba254edeafd7b91e
-
SHA512
05989c1aefce87569dfe31de09507ec965123e8b776db237c8c974cebe8c5c275858ccfbcec3124e5fc0450442afac0d2a08cee3919ac9bc68e19c06128c46e6
-
SSDEEP
24576:Q4kkbEgHWUYr/Ql/V6+Zr0dyFMftqscMOdIYro8u6c4KCtrw9:QhkbEg29sl6O
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1988 1760 WerFault.exe 19 -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1760 wrote to memory of 1988 1760 rundll32.exe 28 PID 1760 wrote to memory of 1988 1760 rundll32.exe 28 PID 1760 wrote to memory of 1988 1760 rundll32.exe 28