Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
64s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
28/11/2022, 02:29
Static task
static1
Behavioral task
behavioral1
Sample
b10d6099210e964d45577d48c8f31ebb93f09118ea789dec3aea83b9930b7383.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b10d6099210e964d45577d48c8f31ebb93f09118ea789dec3aea83b9930b7383.dll
Resource
win10v2004-20221111-en
General
-
Target
b10d6099210e964d45577d48c8f31ebb93f09118ea789dec3aea83b9930b7383.dll
-
Size
18KB
-
MD5
26e392425c4e0dc9ef95e67ac019221f
-
SHA1
386815f99c74e367224679518edfbb686b3e750e
-
SHA256
b10d6099210e964d45577d48c8f31ebb93f09118ea789dec3aea83b9930b7383
-
SHA512
fec209cb2afcfe3c6a7b3aa7d07db3495a0876b284c3f35096efe6dd56d5cfbb168e4bad5108e328386fae3c7751a24bb784cd89af5d73972d7860645cbf6e88
-
SSDEEP
192:UyxWY+Nm6rQX2Ev7WhUk4Ty/QSMhtKSeL/ZLZjBBEJWKaG:U3YemoI5y8De7ZdNvG
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1984 wrote to memory of 1996 1984 rundll32.exe 27 PID 1984 wrote to memory of 1996 1984 rundll32.exe 27 PID 1984 wrote to memory of 1996 1984 rundll32.exe 27 PID 1984 wrote to memory of 1996 1984 rundll32.exe 27 PID 1984 wrote to memory of 1996 1984 rundll32.exe 27 PID 1984 wrote to memory of 1996 1984 rundll32.exe 27 PID 1984 wrote to memory of 1996 1984 rundll32.exe 27
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\b10d6099210e964d45577d48c8f31ebb93f09118ea789dec3aea83b9930b7383.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1984 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\b10d6099210e964d45577d48c8f31ebb93f09118ea789dec3aea83b9930b7383.dll,#12⤵PID:1996
-