Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
156s -
max time network
177s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
21/10/2022, 02:05
Static task
static1
Behavioral task
behavioral1
Sample
81e597480bfa8dad3b5084cf181cccd6317bae127d74cc3ecbfae6a368faf443.dll
Resource
win7-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
81e597480bfa8dad3b5084cf181cccd6317bae127d74cc3ecbfae6a368faf443.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
81e597480bfa8dad3b5084cf181cccd6317bae127d74cc3ecbfae6a368faf443.dll
-
Size
3KB
-
MD5
43289a6cc2752993b0e27fa859555e40
-
SHA1
7466b6718a4b094a6530a51d70a8551ab7b89450
-
SHA256
81e597480bfa8dad3b5084cf181cccd6317bae127d74cc3ecbfae6a368faf443
-
SHA512
af64e5305d573f3e78dcb57e8c45598dfde73b36f59633d1a750df7d55e559f13f673ef4d1ac7bc7e5bd8b7ca240aa671aa6880fbfb1c857ce41a37425797197
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 3716 wrote to memory of 5100 3716 rundll32.exe 80 PID 3716 wrote to memory of 5100 3716 rundll32.exe 80 PID 3716 wrote to memory of 5100 3716 rundll32.exe 80
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\81e597480bfa8dad3b5084cf181cccd6317bae127d74cc3ecbfae6a368faf443.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:3716 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\81e597480bfa8dad3b5084cf181cccd6317bae127d74cc3ecbfae6a368faf443.dll,#12⤵PID:5100
-