Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 18:28
Static task
static1
Behavioral task
behavioral1
Sample
327de15b020ba7acbcf27aedfc06c9fd54c0a01987cc53189eb4e42b119950ad.dll
Resource
win7-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
327de15b020ba7acbcf27aedfc06c9fd54c0a01987cc53189eb4e42b119950ad.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
327de15b020ba7acbcf27aedfc06c9fd54c0a01987cc53189eb4e42b119950ad.dll
-
Size
3KB
-
MD5
962cf79cfd76fa55e4efaaf733dd14e0
-
SHA1
399e1d1cf310b566dcb773f36591080bbbbb52de
-
SHA256
327de15b020ba7acbcf27aedfc06c9fd54c0a01987cc53189eb4e42b119950ad
-
SHA512
2b872b2a0d35c782ecfc1f8af369d82d5ccd8a774388f1e50b17eab5605502fa23966f219867a09a97115efa69bd29ce19effa7a97d89ce4cd91236c3e4f5b5d
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 3720 wrote to memory of 4168 3720 rundll32.exe 81 PID 3720 wrote to memory of 4168 3720 rundll32.exe 81 PID 3720 wrote to memory of 4168 3720 rundll32.exe 81
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\327de15b020ba7acbcf27aedfc06c9fd54c0a01987cc53189eb4e42b119950ad.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:3720 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\327de15b020ba7acbcf27aedfc06c9fd54c0a01987cc53189eb4e42b119950ad.dll,#12⤵PID:4168
-