Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    43s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    30/10/2022, 18:07

General

  • Target

    95c8adaf20bb80d64ceb3dd20559ab41ca89b8ce1b1abd8196ddbef0cbd95c31.dll

  • Size

    94KB

  • MD5

    8318dafcfbcbf01a860559d98088c0ac

  • SHA1

    ee6f154365a3b8482b6bc4abe28f5661e2191914

  • SHA256

    95c8adaf20bb80d64ceb3dd20559ab41ca89b8ce1b1abd8196ddbef0cbd95c31

  • SHA512

    a6722b158e2b44d4074290106daef2632fdb537dc2108f13f00b72b70ebf1b787067907e319e2b904f4968e02eee9af446df55134388027380d1414913244661

  • SSDEEP

    1536:uLagGKilBnQ0qS8EZlWGwTn0WAnsgc2pVsa2V+6AllNYRj:+aXlrqPEZDwT0zTp32IzIj

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\95c8adaf20bb80d64ceb3dd20559ab41ca89b8ce1b1abd8196ddbef0cbd95c31.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:740
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\95c8adaf20bb80d64ceb3dd20559ab41ca89b8ce1b1abd8196ddbef0cbd95c31.dll,#1
      2⤵
        PID:2008

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2008-55-0x0000000075A81000-0x0000000075A83000-memory.dmp

      Filesize

      8KB