Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    184s
  • max time network
    196s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/12/2022, 18:27 UTC

General

  • Target

    686555200d030d69990f4180d3d158eb67c5ab676b7b8dbfda01176395eba9fe.dll

  • Size

    3KB

  • MD5

    a7e6ce5931ed97131f5880fcf723fbe0

  • SHA1

    31f0047b7b145e1b4eb596dc6a00692701ed3e75

  • SHA256

    686555200d030d69990f4180d3d158eb67c5ab676b7b8dbfda01176395eba9fe

  • SHA512

    ac75b71ddb53d4c7243b65c975e21ab312d2a7aac28e25b773de63ff9edfee6b21b773f9e6ef4de71d6830b936c328b80656d35e2cfa40eb70207512b8041a45

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\686555200d030d69990f4180d3d158eb67c5ab676b7b8dbfda01176395eba9fe.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1644
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\686555200d030d69990f4180d3d158eb67c5ab676b7b8dbfda01176395eba9fe.dll,#1
      2⤵
        PID:1180

    Network

      No results found
    • 8.253.208.121:80
      322 B
      7
    • 8.253.208.121:80
      322 B
      7
    • 104.80.225.205:443
      322 B
      7
    • 20.189.173.12:443
      322 B
      7
    • 8.253.208.121:80
      322 B
      7
    • 8.253.208.121:80
      322 B
      7
    • 8.253.208.121:80
      322 B
      7
    No results found

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.