Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
29s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
29/11/2022, 04:26
Static task
static1
Behavioral task
behavioral1
Sample
562f4e4234b1aee808257595b309e31e7769d8ee0569aa856a48b7e711c3d5f8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
562f4e4234b1aee808257595b309e31e7769d8ee0569aa856a48b7e711c3d5f8.dll
Resource
win10v2004-20220812-en
General
-
Target
562f4e4234b1aee808257595b309e31e7769d8ee0569aa856a48b7e711c3d5f8.dll
-
Size
5KB
-
MD5
08ef923deedc7844127194368bc53e00
-
SHA1
a3ebdcf5e12a4b5f8e82185dbc7245d900ce4e69
-
SHA256
562f4e4234b1aee808257595b309e31e7769d8ee0569aa856a48b7e711c3d5f8
-
SHA512
a114956348e976a6beb8439fe5b845174e4e6dfc515124dde347178d437b266dce5c7b484d86f7008b045ca668050e7c05bc1e001fe1fa1f1f4da6be7967e3d2
-
SSDEEP
96:nEY2RrF1eqwi4u65qK0vHR8qxEEK7wG/SkRssEKYDwxxP3A2:EHRh1eppu65qK0vHR8qxEEK7wG/SkRsQ
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2036 wrote to memory of 544 2036 rundll32.exe 26 PID 2036 wrote to memory of 544 2036 rundll32.exe 26 PID 2036 wrote to memory of 544 2036 rundll32.exe 26 PID 2036 wrote to memory of 544 2036 rundll32.exe 26 PID 2036 wrote to memory of 544 2036 rundll32.exe 26 PID 2036 wrote to memory of 544 2036 rundll32.exe 26 PID 2036 wrote to memory of 544 2036 rundll32.exe 26
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\562f4e4234b1aee808257595b309e31e7769d8ee0569aa856a48b7e711c3d5f8.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2036 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\562f4e4234b1aee808257595b309e31e7769d8ee0569aa856a48b7e711c3d5f8.dll,#12⤵PID:544
-