Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
43s -
max time network
53s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
11/02/2023, 18:14
Static task
static1
Behavioral task
behavioral1
Sample
783d2abe8b18a7d42593072cca918b9c6295c341eec4e8927973f1387441795e.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
783d2abe8b18a7d42593072cca918b9c6295c341eec4e8927973f1387441795e.dll
Resource
win10v2004-20220812-en
General
-
Target
783d2abe8b18a7d42593072cca918b9c6295c341eec4e8927973f1387441795e.dll
-
Size
498KB
-
MD5
426366e0aec94f171e0c3ae94b7148f4
-
SHA1
401e4b2ffb4c25d2200453e3fa8abcbe0b6f7ef2
-
SHA256
783d2abe8b18a7d42593072cca918b9c6295c341eec4e8927973f1387441795e
-
SHA512
66c36f5175e132ee5bb36b364c2d3d69dbc022fe31c13e5dbc3cca699989bc12ad12e33cbb1e46c0ea28b8fb597e9f8d1c5d377cce3235754e2ae4f5f86cb942
-
SSDEEP
6144:7VQwSj8EXRVY4ekEJhnSRMWVFw/t4ZcWDny60ioHI57oIvEXRVY4eu506Iye57Tm:7xW/eh62gFye1yj9HI5syW/euNFgaZp
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1532 wrote to memory of 616 1532 rundll32.exe 27 PID 1532 wrote to memory of 616 1532 rundll32.exe 27 PID 1532 wrote to memory of 616 1532 rundll32.exe 27 PID 1532 wrote to memory of 616 1532 rundll32.exe 27 PID 1532 wrote to memory of 616 1532 rundll32.exe 27 PID 1532 wrote to memory of 616 1532 rundll32.exe 27 PID 1532 wrote to memory of 616 1532 rundll32.exe 27
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\783d2abe8b18a7d42593072cca918b9c6295c341eec4e8927973f1387441795e.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1532 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\783d2abe8b18a7d42593072cca918b9c6295c341eec4e8927973f1387441795e.dll,#12⤵PID:616
-