Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
108s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
03/01/2023, 22:38
General
-
Target
BlueSoleil 1.6.1.1 official release/language/0007-German/btpcfg.dll
-
Size
284KB
-
MD5
0fff2c7dcebd6e4f47c2f68a29e88e21
-
SHA1
121a77846a460936158981ecf6e3a4643ae3afe8
-
SHA256
57060626359b4bf2620a1ab38eb0a8e1032da7688efe6da4c39f237dad8db4e8
-
SHA512
0bf0f9192177ae6aeaf87ca4daa08931033cdd91cf7fd44cd933cedfb206e31900f9825d990d299fb5354ffa06685b7d25517e90cd1a2b440826dca7c491fa2f
-
SSDEEP
3072:D3YPxrhRdVQYypwAZw+6ZbNk9SMvjtXCxn7HBg4+yhrSfQbzhvORMYpVfhW8llUb:sPxrhHVFypwAZw7Z+vQlGRSEQ+Z
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\BlueSoleil 1.6.1.1 official release\language\0007-German\btpcfg.dll",#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\BlueSoleil 1.6.1.1 official release\language\0007-German\btpcfg.dll",#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2932 -s 6523⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 372 -p 2932 -ip 29321⤵