Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    39s
  • max time network
    42s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    06/11/2022, 13:31

General

  • Target

    9dcde335bfc096dacb2c0de71b605277484c639dbf027f69923deb4d38bc3dfb.dll

  • Size

    75KB

  • MD5

    09f39024d10d6d215c05343d7408d563

  • SHA1

    e8da7c4b3ad4075289310ffebd2721cec30109c5

  • SHA256

    9dcde335bfc096dacb2c0de71b605277484c639dbf027f69923deb4d38bc3dfb

  • SHA512

    b2cf4456ef814c12d316e5e4237c1e5aa35219494781567546fe0341f404c52b5bd8e21f42272d9f85ad3b75e47ad7bf7e5d44c7d4009a99281f611ef9cde2ae

  • SSDEEP

    1536:n1P3M7eCgWKddbK2ptX75J3TEqwNw+aHmvDr2d48hUI8w:n107/gWmlz7AtwboDKyd5w

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\9dcde335bfc096dacb2c0de71b605277484c639dbf027f69923deb4d38bc3dfb.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:900
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\9dcde335bfc096dacb2c0de71b605277484c639dbf027f69923deb4d38bc3dfb.dll,#1
      2⤵
        PID:1940

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1940-55-0x0000000075C61000-0x0000000075C63000-memory.dmp

      Filesize

      8KB