Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
06/01/2023, 19:27
Static task
static1
Behavioral task
behavioral1
Sample
RealFileSystem.dll
Resource
win7-20221111-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
RealFileSystem.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
RealFileSystem.dll
-
Size
38KB
-
MD5
9457a16f1d4ff421cc547e5be473347b
-
SHA1
f7794b3984e4e9a00b51d2b79a6289d67f8ca592
-
SHA256
48fd087c4167d5c3d21a67ff7a6415fafcaaaeab827ae1320be11b61ac317dcd
-
SHA512
939edf7c8a2d92eb8d1d3ed7db17cc965937a92ea6d821a27d68a3dadf39c1ea78e5cecd40ef8ce3026b215e8c3fdd5dbdd5c58fd9679f7bb0287b621b1b9dc3
-
SSDEEP
768:yjh0GZIvxoyaEahgNwgzbKu942QiqmG6lXXHBMPqkFSQ:ah0GZIvxoyaEahqwSQi/lhMPpSQ
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1064 wrote to memory of 1232 1064 regsvr32.exe 78 PID 1064 wrote to memory of 1232 1064 regsvr32.exe 78 PID 1064 wrote to memory of 1232 1064 regsvr32.exe 78