Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
90s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
03/01/2023, 22:38
General
-
Target
BlueSoleil 1.6.1.1 official release/AmbiCom/OXUI.dll
-
Size
92KB
-
MD5
992d81cc27757081fdcc4e88513a07ae
-
SHA1
c79c3e8b44c07cad585d12be3aad142a081c97ad
-
SHA256
7ed14f3d5acb9d6f6ecaa7c1bc6b74ac1797e76f73bf0930cf46ba14791eb1fc
-
SHA512
6eb7b641d5f89841ebf2365e90791fb1b4e89c3d93907f07b65df98fea9883c1ef356daefa3afecb61a4113a7bc82ecab955252bc05ba2c1a68e1d2eefba5c25
-
SSDEEP
768:CbJhlFZtGcwXZgtOMfuqZYm1Td1TRaoQWNMqeJ3oo+/SriB9DpkFM4f4bT/20Kka:QhlFff8Zsh1TRaQMqeao+HHfjK+o5Zn
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\BlueSoleil 1.6.1.1 official release\AmbiCom\OXUI.dll",#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\BlueSoleil 1.6.1.1 official release\AmbiCom\OXUI.dll",#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5020 -s 6163⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5020 -ip 50201⤵