Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
11/10/2023, 00:51
231011-a7gevsbe37 1011/10/2023, 00:50
231011-a652tshd41 1031/01/2023, 09:06
230131-k21xeshe3z 7Analysis
-
max time kernel
100s -
max time network
105s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
-
submitted
31/01/2023, 09:06
General
-
Target
RDR2CHEAT/build/net40/x86/SQLite.Interop.dll
-
Size
1.2MB
-
MD5
0a6de5fa6ec9a63cabcdd4050daa551b
-
SHA1
db8cb1009f21c10f2509df1ec0ce736c89a78446
-
SHA256
29397546eb8dc57f7c0dc4132ca454c0eabb4047eb69eb104baf4603a16829df
-
SHA512
8755968550fed89235a0d97df8dad807d1bf77198ac3eb354ed6fa258622fe8c7b104116755cdeddfb987801dbc14b5cd08b262031a055928a413ab528d22428
-
SSDEEP
24576:ovvxkyHje2U7uw3wYgkrNyzqK7dfB/q0qriHzAytKGefcJZnJx:on6mjw7Qkxyt7dZ/q0vzrPx
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\RDR2CHEAT\build\net40\x86\SQLite.Interop.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\RDR2CHEAT\build\net40\x86\SQLite.Interop.dll,#12⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB