Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    44s
  • max time network
    49s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    19/10/2022, 16:05 UTC

General

  • Target

    1460866624de8a584426c790527e29c22e88a67d6a0709e35bf93358e7db22b1.dll

  • Size

    9KB

  • MD5

    a0b595d5a5556afd1228dd67941dd5f0

  • SHA1

    e39a74ca538219c9b4b95038ee6927d6743ec175

  • SHA256

    1460866624de8a584426c790527e29c22e88a67d6a0709e35bf93358e7db22b1

  • SHA512

    b663565145fa6f8c3e1f982f366ac2dabb8bd2e558313f5b1b28591d04f779d560fc44723b32892342e0c9d677d8ffae8fab8d4c8cc4bb2703d740e4f6b18532

  • SSDEEP

    192:XNo5kmXmEEnkITKoUBQIEtNvokhF5hDJtKfnv23qJthDNp0:d1mWEHI2oT7Nh9Dqv6qJtN70

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1460866624de8a584426c790527e29c22e88a67d6a0709e35bf93358e7db22b1.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:620
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1460866624de8a584426c790527e29c22e88a67d6a0709e35bf93358e7db22b1.dll,#1
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:1708
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1708 -s 236
        3⤵
        • Program crash
        PID:1288

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1708-55-0x0000000075711000-0x0000000075713000-memory.dmp

    Filesize

    8KB

  • memory/1708-57-0x0000000010000000-0x000000001000E000-memory.dmp

    Filesize

    56KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.