Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
46s -
max time network
50s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
20/10/2022, 19:35
Static task
static1
Behavioral task
behavioral1
Sample
c2e8a1a559e5d7a7f4b27da9982dccd55704743397d6eb2db1748af0acaeed62.dll
Resource
win7-20220901-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
c2e8a1a559e5d7a7f4b27da9982dccd55704743397d6eb2db1748af0acaeed62.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
c2e8a1a559e5d7a7f4b27da9982dccd55704743397d6eb2db1748af0acaeed62.dll
-
Size
2KB
-
MD5
9635643f955525662a39c7faf94c5b3a
-
SHA1
628cf09a6ebeb8e8cad9be6b1fb8082cc5cf0287
-
SHA256
c2e8a1a559e5d7a7f4b27da9982dccd55704743397d6eb2db1748af0acaeed62
-
SHA512
8e505c478be1315131d698b557b55392092a3b02d9fc82bf126894d617d6e0238480271c6135fc51ee879783dfd4e98dfeaaf3bb1f0a0a412384b04f357f7c74
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1500 wrote to memory of 1932 1500 rundll32.exe 27 PID 1500 wrote to memory of 1932 1500 rundll32.exe 27 PID 1500 wrote to memory of 1932 1500 rundll32.exe 27 PID 1500 wrote to memory of 1932 1500 rundll32.exe 27 PID 1500 wrote to memory of 1932 1500 rundll32.exe 27 PID 1500 wrote to memory of 1932 1500 rundll32.exe 27 PID 1500 wrote to memory of 1932 1500 rundll32.exe 27
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c2e8a1a559e5d7a7f4b27da9982dccd55704743397d6eb2db1748af0acaeed62.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1500 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c2e8a1a559e5d7a7f4b27da9982dccd55704743397d6eb2db1748af0acaeed62.dll,#12⤵PID:1932
-