Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2023, 03:10

General

  • Target

    CrystalDiskInfo_9.1.1 #azo 病毒 0 (112.07.13)/CdiResource/dll/AMD_RC2t7x86.dll

  • Size

    153KB

  • MD5

    83961471594193b722f0fbc0f21b6944

  • SHA1

    9add0f76f63e32558116d97afdec0ea2d6f998a3

  • SHA256

    68d7f33a3fa41668a07e4febe68f15d1d0107024cbbafc938a1af283ca0ff07c

  • SHA512

    f93f406ff15be88ad23bcd43d1bd14a3fc39578e3c961063dce3c1285583aa1d78d67506c004d4882e2f9c188df1a78f4031a2038702d16dbcccbc94122b3185

  • SSDEEP

    3072:Zl5kl59rYRjNgQLfLbOEEdIGy4e/LZvUFPhhz31XNfjZfSzfYZfSp:/u9keQLTbBE+GRachzlXjXk

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\CrystalDiskInfo_9.1.1 #azo 病毒 0 (112.07.13)\CdiResource\dll\AMD_RC2t7x86.dll",#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1188
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe "C:\Users\Admin\AppData\Local\Temp\CrystalDiskInfo_9.1.1 #azo 病毒 0 (112.07.13)\CdiResource\dll\AMD_RC2t7x86.dll",#1
      2⤵
        PID:2016

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads