Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
07/11/2022, 01:11
Static task
static1
Behavioral task
behavioral1
Sample
830d5969b22837d9b057eefc6477f6ccab5ea01a2b745356e5577e22c568c5ae.dll
Resource
win7-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
830d5969b22837d9b057eefc6477f6ccab5ea01a2b745356e5577e22c568c5ae.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
830d5969b22837d9b057eefc6477f6ccab5ea01a2b745356e5577e22c568c5ae.dll
-
Size
3KB
-
MD5
0f5998b52a3a310d8d56f54dc8821710
-
SHA1
c9085f69279b945bdf24daa362af4033be93d45d
-
SHA256
830d5969b22837d9b057eefc6477f6ccab5ea01a2b745356e5577e22c568c5ae
-
SHA512
ce887d66153aff885bb1ed9ed66b0b89e20d53efbd230c08e6c796fb5d4cd093376412b42a44a42e31e9a6a912969015e4302df2c9f1507cbeb2b3c08c2c990a
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4692 wrote to memory of 4792 4692 rundll32.exe 79 PID 4692 wrote to memory of 4792 4692 rundll32.exe 79 PID 4692 wrote to memory of 4792 4692 rundll32.exe 79
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\830d5969b22837d9b057eefc6477f6ccab5ea01a2b745356e5577e22c568c5ae.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:4692 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\830d5969b22837d9b057eefc6477f6ccab5ea01a2b745356e5577e22c568c5ae.dll,#12⤵PID:4792
-