Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    67s
  • max time network
    76s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    02/02/2023, 04:20

General

  • Target

    bin64/libeay32.dll

  • Size

    2.2MB

  • MD5

    17b7b7a84812ec0d340bf64c84703dd4

  • SHA1

    b0f9021caa71f1fe17a399ab425f49a63f3d9fd3

  • SHA256

    19396b3fd3458ace580054156b2f257f1687907427def44321f5e989aef4b14a

  • SHA512

    f794226df67983da61c1a4746616040e347f6e28ce2f1a94601955485b0f1d8a5ac63d9248ee6dcc95c0b51f3f24c379ca83479173b543d9e185ac635b0c5238

  • SSDEEP

    49152:Bv/mZPGtlqCNVwASOcrF3D5cxoqCgSsHg6jTELoCNIU6i1lNHCz6qKfopPd:9WBRqCWxjQLS+vNHCz6qKfov

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 4 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin64\libeay32.dll,#1
    1⤵
      PID:1992
    • C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      1⤵
        PID:844
      • C:\Windows\system32\AUDIODG.EXE
        C:\Windows\system32\AUDIODG.EXE 0x55c
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:1200

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/844-54-0x000007FEFC4E1000-0x000007FEFC4E3000-memory.dmp

        Filesize

        8KB