Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
55s -
max time network
31s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
03/12/2022, 10:34
Static task
static1
Behavioral task
behavioral1
Sample
56f23afdb91a60d66e995bbe32b9e208afdb6530a07586db01a030bb33bd53e4.dll
Resource
win7-20221111-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
56f23afdb91a60d66e995bbe32b9e208afdb6530a07586db01a030bb33bd53e4.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
56f23afdb91a60d66e995bbe32b9e208afdb6530a07586db01a030bb33bd53e4.dll
-
Size
3KB
-
MD5
b92d08ec9ef991275389ad031a7bdff0
-
SHA1
c3ed31486628bb9d31074bec14fe71ea398d4df9
-
SHA256
56f23afdb91a60d66e995bbe32b9e208afdb6530a07586db01a030bb33bd53e4
-
SHA512
d5536bd2495b713d7ebed1a2f9d3bb3b6030eb9a3d7a7aeebe01d2b3afa90090d308cb23e86ee0cc350ca5580015d3b96abde21f2c598e9ecb8b3c79865c963c
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1656 wrote to memory of 796 1656 rundll32.exe 28 PID 1656 wrote to memory of 796 1656 rundll32.exe 28 PID 1656 wrote to memory of 796 1656 rundll32.exe 28 PID 1656 wrote to memory of 796 1656 rundll32.exe 28 PID 1656 wrote to memory of 796 1656 rundll32.exe 28 PID 1656 wrote to memory of 796 1656 rundll32.exe 28 PID 1656 wrote to memory of 796 1656 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\56f23afdb91a60d66e995bbe32b9e208afdb6530a07586db01a030bb33bd53e4.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1656 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\56f23afdb91a60d66e995bbe32b9e208afdb6530a07586db01a030bb33bd53e4.dll,#12⤵PID:796
-