Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
42s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
29/11/2022, 06:21
Static task
static1
Behavioral task
behavioral1
Sample
86e379394533af8d8922f1aa73691976368be19c9038334a090e6aadb21c86bc.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
86e379394533af8d8922f1aa73691976368be19c9038334a090e6aadb21c86bc.dll
Resource
win10v2004-20221111-en
General
-
Target
86e379394533af8d8922f1aa73691976368be19c9038334a090e6aadb21c86bc.dll
-
Size
108KB
-
MD5
70646cf4e02622b59c761b7b5257eef3
-
SHA1
9466bab42e99f1339f7ba63cbb2ada916ca98035
-
SHA256
86e379394533af8d8922f1aa73691976368be19c9038334a090e6aadb21c86bc
-
SHA512
3f4a678b3522e41eca8cf26b818bec33c94a8b58458be43f8660300744b6d52ae0080446e6ab035ba507059c0982456af93b0287f91fa46abfbbf9f942b31068
-
SSDEEP
1536:8K/MFocGogybG+60Q+uEEpBl2+Q1BvEnSpEqN2PpdGixX3jH5lWlN05m:8UKocH6MQ+uZ0R15//arZ9lWlNcm
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 996 wrote to memory of 956 996 rundll32.exe 27 PID 996 wrote to memory of 956 996 rundll32.exe 27 PID 996 wrote to memory of 956 996 rundll32.exe 27 PID 996 wrote to memory of 956 996 rundll32.exe 27 PID 996 wrote to memory of 956 996 rundll32.exe 27 PID 996 wrote to memory of 956 996 rundll32.exe 27 PID 996 wrote to memory of 956 996 rundll32.exe 27
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\86e379394533af8d8922f1aa73691976368be19c9038334a090e6aadb21c86bc.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:996 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\86e379394533af8d8922f1aa73691976368be19c9038334a090e6aadb21c86bc.dll,#12⤵PID:956
-