Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
18/07/2023, 12:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6aec676cde0aa6686ceb531bb47014e3.dll
Resource
win7-20230712-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
6aec676cde0aa6686ceb531bb47014e3.dll
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
6aec676cde0aa6686ceb531bb47014e3.dll
-
Size
495KB
-
MD5
6aec676cde0aa6686ceb531bb47014e3
-
SHA1
29e2fa3b4d48046bf21c6babafb96d0d1c925165
-
SHA256
0919f871ce716aa23eeef9379088c4e5b349f02686251af2f3845174e64444af
-
SHA512
86c88f9022846cd959ce5ca318a628a1112c2fc3b7885ad0cc2fdd4ecc27ca72e00ba12782e3a66ea3b02a15cf9827ad792c923f5132688d5b02bf605caf5f43
-
SSDEEP
12288:gR+hTbgSQw+6gRoqUUWs5bApvOIFLV06cSWHn2:gsX+6gimWEby1W6c/n2
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1152 wrote to memory of 2628 1152 rundll32.exe 28 PID 1152 wrote to memory of 2628 1152 rundll32.exe 28 PID 1152 wrote to memory of 2628 1152 rundll32.exe 28 PID 1152 wrote to memory of 2628 1152 rundll32.exe 28 PID 1152 wrote to memory of 2628 1152 rundll32.exe 28 PID 1152 wrote to memory of 2628 1152 rundll32.exe 28 PID 1152 wrote to memory of 2628 1152 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\6aec676cde0aa6686ceb531bb47014e3.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1152 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\6aec676cde0aa6686ceb531bb47014e3.dll,#12⤵PID:2628
-