Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/07/2023, 15:41

General

  • Target

    V2 (08.02.2015)/3dmgame.dll

  • Size

    803KB

  • MD5

    0073dd06d3cf3f763b270ca4d90e7f7e

  • SHA1

    c74ff4419a4c62b9e12c5c24a566d30c5c194e5b

  • SHA256

    b92c6af720ba15a8e866c0714b0b5bddf4fc5911512e86fd596831edcc32a1d6

  • SHA512

    e73e4bf6c3d9ffd1d24650564b9bafb4bdc696d0d62fd2ad93d01c55b75446fced005a079d27ab517aeaf1d79e1df53492c0aa0a84889ac12176bece5549a222

  • SSDEEP

    24576:fjfLjDElfqhv028W7bqogbo4SVrmFiLds5U:f02tL4SVrmFUdOU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 12 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\V2 (08.02.2015)\3dmgame.dll",#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:3224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3224-133-0x00007FFC39580000-0x00007FFC397DD000-memory.dmp

    Filesize

    2.4MB

  • memory/3224-137-0x00007FFBD4150000-0x00007FFBD4151000-memory.dmp

    Filesize

    4KB

  • memory/3224-138-0x00007FFBD4160000-0x00007FFBD4161000-memory.dmp

    Filesize

    4KB

  • memory/3224-139-0x00007FFBD4180000-0x00007FFBD4181000-memory.dmp

    Filesize

    4KB

  • memory/3224-140-0x00007FFC39580000-0x00007FFC397DD000-memory.dmp

    Filesize

    2.4MB

  • memory/3224-141-0x00007FFBD4190000-0x00007FFBD4191000-memory.dmp

    Filesize

    4KB

  • memory/3224-142-0x00007FFBD41A0000-0x00007FFBD41A1000-memory.dmp

    Filesize

    4KB

  • memory/3224-143-0x00007FFBD41B0000-0x00007FFBD41B1000-memory.dmp

    Filesize

    4KB