Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    372s
  • max time network
    1821s
  • platform
    windows10-1703_x64
  • resource
    win10-20220901-es
  • resource tags

    arch:x64arch:x86image:win10-20220901-eslocale:es-esos:windows10-1703-x64systemwindows
  • submitted
    15/02/2023, 04:45

General

  • Target

    lua5.1.dll

  • Size

    318KB

  • MD5

    feef4703e27d5f36517dcd1d4fd7d2b4

  • SHA1

    25962c4f6523b27394133682b9ebb4b3e3e8bb6d

  • SHA256

    2f54d57bcfa726de8a37942cb3d166a1a171f5dc555cc30e7e6f62ac66f85076

  • SHA512

    160729b3f79b46198b88dbee511edd6378f1ed4e081a245b0596d9b9d8b610288ea9791d49bd6e2de2bc262f1c1e3c987fdabf18b7e2a025fa1808d319719501

  • SSDEEP

    6144:0kn2LG5bwf92+0HiDhAqUS0aMkvAvBtAOj+JzOgVKa:Z2x2cdUhZuIBt8xga

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\lua5.1.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4492
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\lua5.1.dll,#1
      2⤵
        PID:4596
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -u -p 4596 -s 616
          3⤵
          • Program crash
          PID:4360

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4596-121-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-122-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-124-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-123-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-125-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-126-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-127-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-128-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-129-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-130-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-131-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-132-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-133-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-134-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-135-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-136-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-137-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-139-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-138-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-140-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-142-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-141-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-143-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-144-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-145-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-146-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-147-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-148-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-149-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-150-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-151-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-152-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-153-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-154-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-155-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-156-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-157-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-158-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-159-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-160-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-161-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-162-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB

    • memory/4596-163-0x0000000077AD0000-0x0000000077C5E000-memory.dmp

      Filesize

      1.6MB