Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    41s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    06/11/2022, 21:35

General

  • Target

    082ca286da5ed5acf2f340aa81fdb90de451e9991bf8fe6d4a6cd1389bb036df.dll

  • Size

    124KB

  • MD5

    077523b791c0b783fa38fd78c21c28d0

  • SHA1

    24840844a16e5d773e747fa5a35d2e082a5c9196

  • SHA256

    082ca286da5ed5acf2f340aa81fdb90de451e9991bf8fe6d4a6cd1389bb036df

  • SHA512

    e471fa79dbf178a016c48f3c6a27da422eccea067bf489b4b5a1d792aea846b81b6ce4fa6d8ccbaa43ebe75c27cf6df3783135707a3d7adb372deedca81767f0

  • SSDEEP

    3072:evBCKnP0upYMO8QBDZdlWT8lbny92zjKqll:EC6YMO8cZTWTybnvPrX

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\082ca286da5ed5acf2f340aa81fdb90de451e9991bf8fe6d4a6cd1389bb036df.dll
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1632
    • C:\Windows\SysWOW64\regsvr32.exe
      /s C:\Users\Admin\AppData\Local\Temp\082ca286da5ed5acf2f340aa81fdb90de451e9991bf8fe6d4a6cd1389bb036df.dll
      2⤵
        PID:1752

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1632-54-0x000007FEFBCA1000-0x000007FEFBCA3000-memory.dmp

      Filesize

      8KB

    • memory/1752-56-0x0000000076091000-0x0000000076093000-memory.dmp

      Filesize

      8KB