Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
255s -
max time network
302s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
29/11/2022, 05:50
Static task
static1
Behavioral task
behavioral1
Sample
43631993bbf8cb519d5edcc12b203ca030cea319d17f7088ddbcc0ad4e17bd8b.dll
Resource
win7-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
43631993bbf8cb519d5edcc12b203ca030cea319d17f7088ddbcc0ad4e17bd8b.dll
Resource
win10v2004-20221111-en
1 signatures
150 seconds
General
-
Target
43631993bbf8cb519d5edcc12b203ca030cea319d17f7088ddbcc0ad4e17bd8b.dll
-
Size
4KB
-
MD5
8ef480e4796332369edcd2e860ba54e0
-
SHA1
e23d6d5355a45f571ba695925dfca6fee9a930f1
-
SHA256
43631993bbf8cb519d5edcc12b203ca030cea319d17f7088ddbcc0ad4e17bd8b
-
SHA512
8aa4222924bce0e3f9f838a1533b698ccca12a70cd4bc5a5428daf6cf6a38a515842066d0ce8de1f212ac1bbdf7ef21ae9910a8cd78a1b2cf926e85535d0d4a8
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 700 wrote to memory of 5072 700 rundll32.exe 81 PID 700 wrote to memory of 5072 700 rundll32.exe 81 PID 700 wrote to memory of 5072 700 rundll32.exe 81
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\43631993bbf8cb519d5edcc12b203ca030cea319d17f7088ddbcc0ad4e17bd8b.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:700 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\43631993bbf8cb519d5edcc12b203ca030cea319d17f7088ddbcc0ad4e17bd8b.dll,#12⤵PID:5072
-