Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
06/12/2022, 20:19
Behavioral task
behavioral1
Sample
9274a5b1c75b01f7cef3aa009a61b5f854ce731a782bc528a4c3f861fab12a66.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9274a5b1c75b01f7cef3aa009a61b5f854ce731a782bc528a4c3f861fab12a66.dll
Resource
win10v2004-20220812-en
General
-
Target
9274a5b1c75b01f7cef3aa009a61b5f854ce731a782bc528a4c3f861fab12a66.dll
-
Size
6.4MB
-
MD5
d5f491826c6e90f47fc8b876b50a8c73
-
SHA1
2832d21e8900f992605376f2d278290e2e42cf77
-
SHA256
9274a5b1c75b01f7cef3aa009a61b5f854ce731a782bc528a4c3f861fab12a66
-
SHA512
78b59a35903e1538afb3d406c6128375823875058f00192731d4fba868d0e49ecbeb3306e7fb2aeaffa650e719266df504258c73259f447ea11cb74a15fea99a
-
SSDEEP
1536:Bsc3ZQClsvD61hixrPbPdQeK4a4nQ96KtabjQZhSUtvmn:Oc3ZQCS7qiBbPdBddQ96KQQtO
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4848 wrote to memory of 1360 4848 rundll32.exe 80 PID 4848 wrote to memory of 1360 4848 rundll32.exe 80 PID 4848 wrote to memory of 1360 4848 rundll32.exe 80
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\9274a5b1c75b01f7cef3aa009a61b5f854ce731a782bc528a4c3f861fab12a66.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:4848 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\9274a5b1c75b01f7cef3aa009a61b5f854ce731a782bc528a4c3f861fab12a66.dll,#12⤵PID:1360
-