Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
07/11/2022, 18:07
Static task
static1
Behavioral task
behavioral1
Sample
602c77d9059e3187d4f8d5cdf330d8806593428432eca1de713addd2f7bf06cd.dll
Resource
win7-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
602c77d9059e3187d4f8d5cdf330d8806593428432eca1de713addd2f7bf06cd.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
602c77d9059e3187d4f8d5cdf330d8806593428432eca1de713addd2f7bf06cd.dll
-
Size
3KB
-
MD5
0b4180f2382de588dbe97f1dca22bc68
-
SHA1
af274a30c6e227c9444dd8de52ffd28c290db262
-
SHA256
602c77d9059e3187d4f8d5cdf330d8806593428432eca1de713addd2f7bf06cd
-
SHA512
334aa5d9f10a68bb372e9b0299eab61aff9260c815a34abfe6400b62876d63e011e4c7e9741083a0705278d0c4b2786e7509b7afd92ba423250e30d01c1997f7
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 488 wrote to memory of 3672 488 rundll32.exe 78 PID 488 wrote to memory of 3672 488 rundll32.exe 78 PID 488 wrote to memory of 3672 488 rundll32.exe 78
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\602c77d9059e3187d4f8d5cdf330d8806593428432eca1de713addd2f7bf06cd.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:488 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\602c77d9059e3187d4f8d5cdf330d8806593428432eca1de713addd2f7bf06cd.dll,#12⤵PID:3672
-