Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
195s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
04/12/2022, 00:27
Behavioral task
behavioral1
Sample
c950a76e0eb3fb2a4cf22bc2d10ae88e15364d5a50b7634b47df6b8c71d06658.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c950a76e0eb3fb2a4cf22bc2d10ae88e15364d5a50b7634b47df6b8c71d06658.dll
Resource
win10v2004-20220812-en
General
-
Target
c950a76e0eb3fb2a4cf22bc2d10ae88e15364d5a50b7634b47df6b8c71d06658.dll
-
Size
54KB
-
MD5
82e69cafb73a71bd6f43f5def92c23e0
-
SHA1
81c017363489bab454777e3375842d7e48826765
-
SHA256
c950a76e0eb3fb2a4cf22bc2d10ae88e15364d5a50b7634b47df6b8c71d06658
-
SHA512
b278a594a69eb483421b61c5b7b46bd80d650f99dc120eaa290393b443397ba63b1d430c653b3653e42b0e3d2ca72b917e108c5568af63c2fde448f6d5640def
-
SSDEEP
1536:Bm1NGJVGeCXDWzhfWRPNn1F9JoORVKsNkQGSy3Bp:kX0VvrzcdNn1FrbbKWH7y3Bp
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 3500 wrote to memory of 4164 3500 rundll32.exe 78 PID 3500 wrote to memory of 4164 3500 rundll32.exe 78 PID 3500 wrote to memory of 4164 3500 rundll32.exe 78
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c950a76e0eb3fb2a4cf22bc2d10ae88e15364d5a50b7634b47df6b8c71d06658.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:3500 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c950a76e0eb3fb2a4cf22bc2d10ae88e15364d5a50b7634b47df6b8c71d06658.dll,#12⤵PID:4164
-