Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

RunDLL-1.bat

windows7-x64

1

RunDLL-1.bat

windows10-2004-x64

1

RuntimeBroker.exe

windows7-x64

RuntimeBroker.exe

windows10-2004-x64

1

UMPDC.dll

windows7-x64

1

UMPDC.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    0s
  • max time network
    3s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    16/08/2023, 01:59

Sharing

Copy URL
Twitter E-mail

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\RuntimeBroker.exe command="C:\Users\Admin\AppData\Local\Temp\RuntimeBroker.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.
Report Analysis Logs

General

  • Target

    RuntimeBroker.exe

  • Size

    100KB

  • MD5

    ba4cfe6461afa1004c52f19c8f2169dc

  • SHA1

    ab8539ef6b2a93ff9589dec4b34a0257b6296c92

  • SHA256

    e86870769ee6c797e09457bd99c58d9bf2303cf0193a24ef9b1222c2c3daf628

  • SHA512

    2c5190d7609767237311260f241c619b82434ca640f396bb9710d356286844f82f320f9e05525a38707f2a52977790c0c3e2a217b36a7f0095a87c138b939af0

  • SSDEEP

    1536:l5gC0wSKok6UAeVEBFgvozLmwCedFpQHI8PXjYlTx/2whBGE/5K5/EJD2VEUcO8h:sC+vEArBCgmejo8X/2whRJDAE2r+e

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\RuntimeBroker.exe
    "C:\Users\Admin\AppData\Local\Temp\RuntimeBroker.exe"
    1⤵
      PID:1612

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads