Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    39s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    02/12/2022, 18:43

General

  • Target

    45d57f2b7ebb7504fb8d07792c3f9359a4e2e962bd92ef716e9fd6446c8276e2.dll

  • Size

    225KB

  • MD5

    307b60e47d32e03a71488ff622a13670

  • SHA1

    cbb658a3bf7f6c808bf349b9e3e510e7f0206626

  • SHA256

    45d57f2b7ebb7504fb8d07792c3f9359a4e2e962bd92ef716e9fd6446c8276e2

  • SHA512

    427aa0a83175fd59dffeffe2948094636bdf90119afae799a8f5b69d87c88b0d594ed2ff362d872c7cf536b32311988461c6aee652c90f2c50095e1f445df6d5

  • SSDEEP

    3072:jF076dxJS51JYjCFFIU2svLihbepHFyUKQ1rciBXcKkBX1KlBX1e:u0qJ6hMzrciBXcKkBX1KlBX1e

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\45d57f2b7ebb7504fb8d07792c3f9359a4e2e962bd92ef716e9fd6446c8276e2.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1116
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\45d57f2b7ebb7504fb8d07792c3f9359a4e2e962bd92ef716e9fd6446c8276e2.dll,#1
      2⤵
        PID:1528

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1528-55-0x0000000076381000-0x0000000076383000-memory.dmp

      Filesize

      8KB

    • memory/1528-60-0x0000000075350000-0x00000000753ED000-memory.dmp

      Filesize

      628KB

    • memory/1528-61-0x0000000076250000-0x00000000762F0000-memory.dmp

      Filesize

      640KB

    • memory/1528-62-0x0000000076250000-0x00000000762F0000-memory.dmp

      Filesize

      640KB

    • memory/1528-63-0x0000000076250000-0x00000000762F0000-memory.dmp

      Filesize

      640KB

    • memory/1528-64-0x0000000074E10000-0x0000000074E5C000-memory.dmp

      Filesize

      304KB

    • memory/1528-65-0x0000000074E10000-0x0000000074E5C000-memory.dmp

      Filesize

      304KB

    • memory/1528-66-0x0000000074E10000-0x0000000074E5C000-memory.dmp

      Filesize

      304KB

    • memory/1528-67-0x0000000074E10000-0x0000000074E5C000-memory.dmp

      Filesize

      304KB

    • memory/1528-68-0x0000000074D80000-0x0000000074E0D000-memory.dmp

      Filesize

      564KB

    • memory/1528-69-0x0000000074D80000-0x0000000074E0D000-memory.dmp

      Filesize

      564KB

    • memory/1528-70-0x0000000074D80000-0x0000000074E0D000-memory.dmp

      Filesize

      564KB

    • memory/1528-71-0x00000000761B0000-0x0000000076207000-memory.dmp

      Filesize

      348KB

    • memory/1528-72-0x00000000761B0000-0x0000000076207000-memory.dmp

      Filesize

      348KB

    • memory/1528-73-0x00000000761B0000-0x0000000076207000-memory.dmp

      Filesize

      348KB

    • memory/1528-74-0x00000000761B0000-0x0000000076207000-memory.dmp

      Filesize

      348KB

    • memory/1528-75-0x00000000761B0000-0x0000000076207000-memory.dmp

      Filesize

      348KB

    • memory/1528-76-0x00000000761B0000-0x0000000076207000-memory.dmp

      Filesize

      348KB

    • memory/1528-77-0x00000000751E0000-0x000000007526F000-memory.dmp

      Filesize

      572KB

    • memory/1528-78-0x0000000074CF0000-0x0000000074D41000-memory.dmp

      Filesize

      324KB

    • memory/1528-83-0x0000000074CB0000-0x0000000074CB9000-memory.dmp

      Filesize

      36KB

    • memory/1528-82-0x0000000074CC0000-0x0000000074CCE000-memory.dmp

      Filesize

      56KB

    • memory/1528-81-0x0000000074CC0000-0x0000000074CCE000-memory.dmp

      Filesize

      56KB

    • memory/1528-80-0x0000000074CD0000-0x0000000074CE2000-memory.dmp

      Filesize

      72KB

    • memory/1528-79-0x0000000074CF0000-0x0000000074D41000-memory.dmp

      Filesize

      324KB

    • memory/1528-85-0x00000000753F0000-0x00000000754BC000-memory.dmp

      Filesize

      816KB