Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
171s -
max time network
189s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
06/12/2022, 01:37 UTC
Static task
static1
Behavioral task
behavioral1
Sample
efd83e65979e92d4ded9f50ede22b7293fd466be83830e27dff15670fe6edcd9.dll
Resource
win7-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
efd83e65979e92d4ded9f50ede22b7293fd466be83830e27dff15670fe6edcd9.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
efd83e65979e92d4ded9f50ede22b7293fd466be83830e27dff15670fe6edcd9.dll
-
Size
3KB
-
MD5
1dcbbd33f77af1ab5991ecb053964db0
-
SHA1
408e6b63f7d83efa8bd19a7d9c7a682866e54544
-
SHA256
efd83e65979e92d4ded9f50ede22b7293fd466be83830e27dff15670fe6edcd9
-
SHA512
894a1252ef7c2baaea20cedb4f8640312bffe94fd17a00bd341f337d8dcc2adad907de01b319183f55fad296366256de57b1a0bf3267893a79baa16bb8e87609
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 444 wrote to memory of 3336 444 rundll32.exe 48 PID 444 wrote to memory of 3336 444 rundll32.exe 48 PID 444 wrote to memory of 3336 444 rundll32.exe 48
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\efd83e65979e92d4ded9f50ede22b7293fd466be83830e27dff15670fe6edcd9.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:444 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\efd83e65979e92d4ded9f50ede22b7293fd466be83830e27dff15670fe6edcd9.dll,#12⤵PID:3336
-