Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
required d...ts.iso
windows7-x64
3required d...ts.iso
windows10-2004-x64
3OUBcVbISpNCsLG.bat
windows7-x64
10OUBcVbISpNCsLG.bat
windows10-2004-x64
10documents.lnk
windows7-x64
10documents.lnk
windows10-2004-x64
10lXNqexIxTwBWAS.dll
windows7-x64
3lXNqexIxTwBWAS.dll
windows10-2004-x64
3Analysis
-
max time kernel
43s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
27/10/2022, 15:52
Static task
static1
Behavioral task
behavioral1
Sample
required documents.iso
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
required documents.iso
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
OUBcVbISpNCsLG.bat
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
OUBcVbISpNCsLG.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
documents.lnk
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
documents.lnk
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
lXNqexIxTwBWAS.dll
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
lXNqexIxTwBWAS.dll
Resource
win10v2004-20220812-en
General
-
Target
lXNqexIxTwBWAS.dll
-
Size
1.9MB
-
MD5
9defcff2b09c7d842d70c5dbf1614c4b
-
SHA1
07725122a95bd5ea5b9136b9a6363ecdff4a8a49
-
SHA256
1df0e65db9d41ebd6941aacbadeb935933b3e5ee2805eb89d340d097ac83285c
-
SHA512
fd679395efc4030cdff339526355c3c962e0fd21b37f9f5d1ac29be29970c564b9b28105c1437ee67d0f508f0b557eb7c4b471c9a63d6149a330d5b9ab8794a1
-
SSDEEP
49152:0WMIqdgaiFBRzI9sXUd9BqiIirDxLCll+HaVD7RNPb:YIqdiOwQjIiIH+HaVRND
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1900 2004 WerFault.exe 27 -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2004 wrote to memory of 1900 2004 rundll32.exe 28 PID 2004 wrote to memory of 1900 2004 rundll32.exe 28 PID 2004 wrote to memory of 1900 2004 rundll32.exe 28