Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
154s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
06/12/2022, 11:44
Static task
static1
Behavioral task
behavioral1
Sample
f1d62f1b01c6ba4e21f84bdd0f712b8b7608d7595991ba9cbffc27ea06460b2a.dll
Resource
win7-20220901-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
f1d62f1b01c6ba4e21f84bdd0f712b8b7608d7595991ba9cbffc27ea06460b2a.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
f1d62f1b01c6ba4e21f84bdd0f712b8b7608d7595991ba9cbffc27ea06460b2a.dll
-
Size
3KB
-
MD5
3db64eba3e37575dc9e0d7bc03ffae40
-
SHA1
bb506de3436a5e338357bbe5cb7e19268d6ae111
-
SHA256
f1d62f1b01c6ba4e21f84bdd0f712b8b7608d7595991ba9cbffc27ea06460b2a
-
SHA512
8bbf1731e44b7fe1ad686ce855257b95239b3d79a6b3568796a79f6e8e571c9acdf906a152c52edfc176c6df5a0f8483819672490fd6b49381bae9d4e51a6a3e
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4772 wrote to memory of 2252 4772 rundll32.exe 80 PID 4772 wrote to memory of 2252 4772 rundll32.exe 80 PID 4772 wrote to memory of 2252 4772 rundll32.exe 80
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\f1d62f1b01c6ba4e21f84bdd0f712b8b7608d7595991ba9cbffc27ea06460b2a.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:4772 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\f1d62f1b01c6ba4e21f84bdd0f712b8b7608d7595991ba9cbffc27ea06460b2a.dll,#12⤵PID:2252
-