Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
61s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
30/10/2022, 00:49
Static task
static1
Behavioral task
behavioral1
Sample
5b4570b3a0dbc01a88800cfbedab65f36004a211c738126b8ed2b0ee697c7441.dll
Resource
win7-20220901-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
5b4570b3a0dbc01a88800cfbedab65f36004a211c738126b8ed2b0ee697c7441.dll
Resource
win10v2004-20220901-en
1 signatures
150 seconds
General
-
Target
5b4570b3a0dbc01a88800cfbedab65f36004a211c738126b8ed2b0ee697c7441.dll
-
Size
4KB
-
MD5
45f8d98e857b71c8cc31c8900d17917c
-
SHA1
3d40b687d350e1f821d3ededccf8b86861d9c986
-
SHA256
5b4570b3a0dbc01a88800cfbedab65f36004a211c738126b8ed2b0ee697c7441
-
SHA512
3c642b963851fb6d934d13d25641c9b47eb26ee081c1f37c2eb833ec2c8dfc401b5a0b983d2e396e84c8eb255f99a7b0517ab9bc9cf3a65aceaf3157362e26f3
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2976 wrote to memory of 3640 2976 rundll32.exe 67 PID 2976 wrote to memory of 3640 2976 rundll32.exe 67 PID 2976 wrote to memory of 3640 2976 rundll32.exe 67
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5b4570b3a0dbc01a88800cfbedab65f36004a211c738126b8ed2b0ee697c7441.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2976 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5b4570b3a0dbc01a88800cfbedab65f36004a211c738126b8ed2b0ee697c7441.dll,#12⤵PID:3640
-