Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

35dcf7bdc7...8f.dll

windows7-x64

1

35dcf7bdc7...8f.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    182s
  • max time network
    209s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/12/2022, 15:09 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    35dcf7bdc7f5bbdface842b2566dd15e015bc8ca77d6031a531ef5b167ca798f.dll

  • Size

    150KB

  • MD5

    1cb5b879df22321c0d0cbb881b4eb209

  • SHA1

    83280f83ad0e519a900c5e964e8f6ec9ba682a23

  • SHA256

    35dcf7bdc7f5bbdface842b2566dd15e015bc8ca77d6031a531ef5b167ca798f

  • SHA512

    8cf4ca4fe2dfda5de84417c190164077bc64231a1dd44a0e0adeb437cce68d43c6d298cc70ff07e8d164875cf6b07443e01d8110f360623474a907987a7499cb

  • SSDEEP

    1536:H+UsINIJkuvfZ/AuwZnfiK1De0YiFi5IdKGm0+B1jJwmQRZChwvDH+nfw:GiyxvfGZfJDeYN/mN3EuW6fw

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\35dcf7bdc7f5bbdface842b2566dd15e015bc8ca77d6031a531ef5b167ca798f.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1700
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\35dcf7bdc7f5bbdface842b2566dd15e015bc8ca77d6031a531ef5b167ca798f.dll,#1
      2⤵
        PID:4740

    Network

    • flag-unknown
      DNS
      96.108.152.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      96.108.152.52.in-addr.arpa
      IN PTR
      Response
    • 96.16.53.137:80
      92 B
       80 B
       2
      2
    • 8.238.23.254:80
      46 B
       40 B
       1
      1
    • 8.238.23.254:80
      46 B
       40 B
       1
      1
    • 8.238.23.254:80
      46 B
       40 B
       1
      1
    • 93.184.220.29:80
      322 B
       7
    • 8.247.211.254:80
      322 B
       7
    • 20.42.73.24:443
      322 B
       7
    • 178.79.208.1:80
      322 B
       7
    • 104.80.225.205:443
      322 B
       7
    • 8.8.8.8:53
      96.108.152.52.in-addr.arpa
      dns
      72 B
       146 B
       1
      1

      DNS Request

      96.108.152.52.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4740-133-0x0000000010000000-0x0000000010029000-memory.dmp

      Filesize

      164KB

      Download

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.