Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 01:40
Behavioral task
behavioral1
Sample
8c1c3c21e71370a9b17d67e4c8e08f310e6e27743bae7b4d216d9d20c58341a0.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8c1c3c21e71370a9b17d67e4c8e08f310e6e27743bae7b4d216d9d20c58341a0.dll
Resource
win10v2004-20220812-en
General
-
Target
8c1c3c21e71370a9b17d67e4c8e08f310e6e27743bae7b4d216d9d20c58341a0.dll
-
Size
69KB
-
MD5
906dbc76eb2c86d47049e9a1ee34e0b5
-
SHA1
69b3a82ee82d6f0f5303fec1408100cc935ded37
-
SHA256
8c1c3c21e71370a9b17d67e4c8e08f310e6e27743bae7b4d216d9d20c58341a0
-
SHA512
a7027653dc45056145649f9d60af913c637eb50aacc37f77a51e24c0dcb9e0b3f54bb554d9106bced7597f6c779581bb1e9be5d2781fb46af337b2c08e731a84
-
SSDEEP
1536:9z/Dh9qNGgUI8ge10LQQNzYJ9ODfQJnr/i8PijW:BhYNnUI8MX0J9O6nr//KjW
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 448 wrote to memory of 2100 448 rundll32.exe 80 PID 448 wrote to memory of 2100 448 rundll32.exe 80 PID 448 wrote to memory of 2100 448 rundll32.exe 80
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\8c1c3c21e71370a9b17d67e4c8e08f310e6e27743bae7b4d216d9d20c58341a0.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:448 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\8c1c3c21e71370a9b17d67e4c8e08f310e6e27743bae7b4d216d9d20c58341a0.dll,#12⤵PID:2100
-