Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02/12/2022, 21:52
Static task
static1
Behavioral task
behavioral1
Sample
e41ea8b78f0e5ea10b4f8ffa9735e975da20493257e3aadf653c83b647c94552.dll
Resource
win7-20220901-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
e41ea8b78f0e5ea10b4f8ffa9735e975da20493257e3aadf653c83b647c94552.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
e41ea8b78f0e5ea10b4f8ffa9735e975da20493257e3aadf653c83b647c94552.dll
-
Size
3KB
-
MD5
e00dad06e084c42b686d5344d35b842d
-
SHA1
511c6355448bbc4d9957a172b6a27577f9400d04
-
SHA256
e41ea8b78f0e5ea10b4f8ffa9735e975da20493257e3aadf653c83b647c94552
-
SHA512
12483a135a6cba86419a3f10a160251d516f6c300f8b011d0f8dd7ba8036abf85c97895af95f939b73c1485b261a1da9ab429aca24f3d55a9d75f90f67ae9005
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1944 wrote to memory of 3112 1944 rundll32.exe 76 PID 1944 wrote to memory of 3112 1944 rundll32.exe 76 PID 1944 wrote to memory of 3112 1944 rundll32.exe 76
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\e41ea8b78f0e5ea10b4f8ffa9735e975da20493257e3aadf653c83b647c94552.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1944 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\e41ea8b78f0e5ea10b4f8ffa9735e975da20493257e3aadf653c83b647c94552.dll,#12⤵PID:3112
-