Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/07/2023, 15:41

General

  • Target

    V1 (01.02.2015)/3dmgame.dll

  • Size

    719KB

  • MD5

    a3d4a2d0ff0e9d1ab550da0118ca030d

  • SHA1

    d2ed8e27c1171cb13ab6b2d5def9944eb8fb95b1

  • SHA256

    4223565b2e7343b46f1092c78fc655ff3d63315d5e64483e81ee2db192f92268

  • SHA512

    852cafb36de22e1673a25ae37457f3b281312d2d9a2769b777eaf055766eef00c8b0c3ccc93cd00439d033f79b1fdb3223245b61d030b06fd3e8015acbb16a7a

  • SSDEEP

    12288:EzT152LYwNwt+I8LFktPqU1FCqckxaq/butNxReGtQ1D5Xq32w3HXFLPaIU+H8NJ:Ezbv4wLPqACUaqKtNxApqxLBUxq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\V1 (01.02.2015)\3dmgame.dll",#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2924-136-0x00007FFC36A70000-0x00007FFC36C9A000-memory.dmp

    Filesize

    2.2MB

  • memory/2924-137-0x00007FFC36A70000-0x00007FFC36C9A000-memory.dmp

    Filesize

    2.2MB

  • memory/2924-141-0x00007FFBD1C20000-0x00007FFBD1C21000-memory.dmp

    Filesize

    4KB

  • memory/2924-142-0x00007FFBD1C50000-0x00007FFBD1C51000-memory.dmp

    Filesize

    4KB