Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
153s -
max time network
171s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
04/12/2022, 02:05
Static task
static1
Behavioral task
behavioral1
Sample
926daf629dd6ad2d377fe80091b61a611f1315d2688c14a450abb173fd3eb90b.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
926daf629dd6ad2d377fe80091b61a611f1315d2688c14a450abb173fd3eb90b.dll
Resource
win10v2004-20220812-en
General
-
Target
926daf629dd6ad2d377fe80091b61a611f1315d2688c14a450abb173fd3eb90b.dll
-
Size
188KB
-
MD5
3bea9d424358177b07aaa34c27e360a0
-
SHA1
ddba470486d8fbe94a2c41beb2abe5c100b5fa04
-
SHA256
926daf629dd6ad2d377fe80091b61a611f1315d2688c14a450abb173fd3eb90b
-
SHA512
7b2993f6ad3c0ab84a33e628f15a871f6c9ddf7df74680cf026cf667ddd87122c72ebe4809c82fd5e2785c7d0b63aac09e1df4b2812eba11bda6a5e1143505b7
-
SSDEEP
3072:6BHgnYMA7PmGwyVHHXtYYs+yd148kDuWQezRKeXm0z5sdk/qn8KxqEEcXGm:aHgYMAilyhHXt93DuWQezXmsC0qHScW
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 860 wrote to memory of 3064 860 rundll32.exe 80 PID 860 wrote to memory of 3064 860 rundll32.exe 80 PID 860 wrote to memory of 3064 860 rundll32.exe 80
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\926daf629dd6ad2d377fe80091b61a611f1315d2688c14a450abb173fd3eb90b.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:860 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\926daf629dd6ad2d377fe80091b61a611f1315d2688c14a450abb173fd3eb90b.dll,#12⤵PID:3064
-