Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
19s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
06/12/2022, 01:22
Behavioral task
behavioral1
Sample
7a30cea87d8d28e60e7a1a75fc17657c8159f8f80ccfef34b094d8d42a380ae4.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7a30cea87d8d28e60e7a1a75fc17657c8159f8f80ccfef34b094d8d42a380ae4.dll
Resource
win10v2004-20220812-en
General
-
Target
7a30cea87d8d28e60e7a1a75fc17657c8159f8f80ccfef34b094d8d42a380ae4.dll
-
Size
4KB
-
MD5
2361585f03a4aaacae107bca7153d590
-
SHA1
d0b2b5ca8db38cd2d6647e1262cfa7b16dc96b5a
-
SHA256
7a30cea87d8d28e60e7a1a75fc17657c8159f8f80ccfef34b094d8d42a380ae4
-
SHA512
053a7b1bacca4cef797deee5850ebd1fd42c3d906411e9aaec0b5bef457316583cecd8286849863490ac5e7a2900efa4c4013f7607681e94c685e26ec59d3d42
-
SSDEEP
48:a5zuMqBcq06phM/wwWLSeJY8JTa6Il+LKsMYJx9NhJQNlg0YQWG5LUteIrMslf6y:TRphMzf8KEJxBJQNlg4W+L1IeDc0UVn
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1808 wrote to memory of 908 1808 rundll32.exe 28 PID 1808 wrote to memory of 908 1808 rundll32.exe 28 PID 1808 wrote to memory of 908 1808 rundll32.exe 28 PID 1808 wrote to memory of 908 1808 rundll32.exe 28 PID 1808 wrote to memory of 908 1808 rundll32.exe 28 PID 1808 wrote to memory of 908 1808 rundll32.exe 28 PID 1808 wrote to memory of 908 1808 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\7a30cea87d8d28e60e7a1a75fc17657c8159f8f80ccfef34b094d8d42a380ae4.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1808 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\7a30cea87d8d28e60e7a1a75fc17657c8159f8f80ccfef34b094d8d42a380ae4.dll,#12⤵PID:908
-