Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
22/08/2023, 23:27
Static task
static1
Behavioral task
behavioral1
Sample
a708ea74d484795cce3aa84bdc3c8de65bea40ebe8df5d8219b26f7e35a4c575.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a708ea74d484795cce3aa84bdc3c8de65bea40ebe8df5d8219b26f7e35a4c575.dll
Resource
win10v2004-20230703-en
General
-
Target
a708ea74d484795cce3aa84bdc3c8de65bea40ebe8df5d8219b26f7e35a4c575.dll
-
Size
51KB
-
MD5
35bb18aef056005fec299ca7b116766c
-
SHA1
215ce666d70d729d10108d668d8d3f7cf9e9bbab
-
SHA256
a708ea74d484795cce3aa84bdc3c8de65bea40ebe8df5d8219b26f7e35a4c575
-
SHA512
85b1a8b7b30614f9e4257cf07b7e5168c04bd3e4df954027f1a478104a11fb626e7cb296d1fdf55a5f202ef6d35a33cf47f3c17345bced4f5618d7dc56e8c4b9
-
SSDEEP
768:3Er7XR1M6t6FikUE58ozVOB+6QcXn0cE5Y18BtrEZJjuSkwFOBezssAMC6Hh4:3EXXM2HEhzVWKtrEZFxFOB7pMC6H
Malware Config
Signatures
-
Suspicious behavior: RenamesItself 1 IoCs
pid Process 2652 rundll32.exe -
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 952 wrote to memory of 2652 952 rundll32.exe 28 PID 952 wrote to memory of 2652 952 rundll32.exe 28 PID 952 wrote to memory of 2652 952 rundll32.exe 28 PID 952 wrote to memory of 2652 952 rundll32.exe 28 PID 952 wrote to memory of 2652 952 rundll32.exe 28 PID 952 wrote to memory of 2652 952 rundll32.exe 28 PID 952 wrote to memory of 2652 952 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\a708ea74d484795cce3aa84bdc3c8de65bea40ebe8df5d8219b26f7e35a4c575.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:952 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\a708ea74d484795cce3aa84bdc3c8de65bea40ebe8df5d8219b26f7e35a4c575.dll,#12⤵
- Suspicious behavior: RenamesItself
PID:2652
-