Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29/11/2022, 15:07
Static task
static1
Behavioral task
behavioral1
Sample
a9f34774699032c0d752fa17e8d7564aa88e2db882f418d2fc1428e73df35394.dll
Resource
win7-20221111-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
a9f34774699032c0d752fa17e8d7564aa88e2db882f418d2fc1428e73df35394.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
a9f34774699032c0d752fa17e8d7564aa88e2db882f418d2fc1428e73df35394.dll
-
Size
3KB
-
MD5
1a90728d238cc9ea275007a3710cb8b0
-
SHA1
d196a6eee19726540bb1c62ee6b6a71e9bc327e4
-
SHA256
a9f34774699032c0d752fa17e8d7564aa88e2db882f418d2fc1428e73df35394
-
SHA512
654e47b8f6be1596bb6888d4851d5a4958a0820c3bbed2cfca1e5f3453763c23639d1d02eb1166fd1af839d8da5884c5d639a2b1cb55bc8b32213a5fb7dae0b3
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4180 wrote to memory of 1880 4180 rundll32.exe 82 PID 4180 wrote to memory of 1880 4180 rundll32.exe 82 PID 4180 wrote to memory of 1880 4180 rundll32.exe 82
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\a9f34774699032c0d752fa17e8d7564aa88e2db882f418d2fc1428e73df35394.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:4180 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\a9f34774699032c0d752fa17e8d7564aa88e2db882f418d2fc1428e73df35394.dll,#12⤵PID:1880
-