Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
41s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
24/11/2022, 00:51
Static task
static1
Behavioral task
behavioral1
Sample
1f2368ffb75b3f85a368410e7bccfc71422c1cd9b687bbe37713b82507176ede.dll
Resource
win7-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
1f2368ffb75b3f85a368410e7bccfc71422c1cd9b687bbe37713b82507176ede.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
1f2368ffb75b3f85a368410e7bccfc71422c1cd9b687bbe37713b82507176ede.dll
-
Size
4KB
-
MD5
54d100fc51ff1274ff64ef171fb637ae
-
SHA1
2aab5ddb3330e6d9f568493036d3bf6df0adae57
-
SHA256
1f2368ffb75b3f85a368410e7bccfc71422c1cd9b687bbe37713b82507176ede
-
SHA512
3d484614ace29aaa169951277e2540d00984c4f73ecd6702ccb7599687a73d57043276ccd11c090facfa62377abbf83357a4263ca41310e293a171c9d101f635
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1468 wrote to memory of 1268 1468 rundll32.exe 28 PID 1468 wrote to memory of 1268 1468 rundll32.exe 28 PID 1468 wrote to memory of 1268 1468 rundll32.exe 28 PID 1468 wrote to memory of 1268 1468 rundll32.exe 28 PID 1468 wrote to memory of 1268 1468 rundll32.exe 28 PID 1468 wrote to memory of 1268 1468 rundll32.exe 28 PID 1468 wrote to memory of 1268 1468 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1f2368ffb75b3f85a368410e7bccfc71422c1cd9b687bbe37713b82507176ede.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1468 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1f2368ffb75b3f85a368410e7bccfc71422c1cd9b687bbe37713b82507176ede.dll,#12⤵PID:1268
-