Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
139s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
20/08/2023, 17:43
Static task
static1
Behavioral task
behavioral1
Sample
4367bf3a2250ebf3f54ed37ee3d1741be32a5b0d73fbe9cd30beefff4c796e3e.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4367bf3a2250ebf3f54ed37ee3d1741be32a5b0d73fbe9cd30beefff4c796e3e.dll
Resource
win10v2004-20230703-en
General
-
Target
4367bf3a2250ebf3f54ed37ee3d1741be32a5b0d73fbe9cd30beefff4c796e3e.dll
-
Size
54KB
-
MD5
ac70704e89e007f34296b19a42cb8452
-
SHA1
f5807ae1b70f5a7ceeb0d6a405eea2e92a98512a
-
SHA256
4367bf3a2250ebf3f54ed37ee3d1741be32a5b0d73fbe9cd30beefff4c796e3e
-
SHA512
4bf89deed2ed4538d40409ba8954d899384276a5b71ccfda91b4e15c741b261d4be17febbe06ff0526936205bf0db7f9a1e2cc127db4f423390e5db3d76794d8
-
SSDEEP
768:Cbg7gwUszsM21Oln04yf+3+fbU/qKhrBOzwRGNcVQj0b/jDP4v0jZKZj8QfBa7Mm:8mwyP/qEgzsQbBagKtqnU
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2344 wrote to memory of 1684 2344 rundll32.exe 81 PID 2344 wrote to memory of 1684 2344 rundll32.exe 81 PID 2344 wrote to memory of 1684 2344 rundll32.exe 81
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\4367bf3a2250ebf3f54ed37ee3d1741be32a5b0d73fbe9cd30beefff4c796e3e.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2344 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\4367bf3a2250ebf3f54ed37ee3d1741be32a5b0d73fbe9cd30beefff4c796e3e.dll,#12⤵PID:1684
-