Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    91s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/08/2023, 23:27

General

  • Target

    a708ea74d484795cce3aa84bdc3c8de65bea40ebe8df5d8219b26f7e35a4c575.dll

  • Size

    51KB

  • MD5

    35bb18aef056005fec299ca7b116766c

  • SHA1

    215ce666d70d729d10108d668d8d3f7cf9e9bbab

  • SHA256

    a708ea74d484795cce3aa84bdc3c8de65bea40ebe8df5d8219b26f7e35a4c575

  • SHA512

    85b1a8b7b30614f9e4257cf07b7e5168c04bd3e4df954027f1a478104a11fb626e7cb296d1fdf55a5f202ef6d35a33cf47f3c17345bced4f5618d7dc56e8c4b9

  • SSDEEP

    768:3Er7XR1M6t6FikUE58ozVOB+6QcXn0cE5Y18BtrEZJjuSkwFOBezssAMC6Hh4:3EXXM2HEhzVWKtrEZFxFOB7pMC6H

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: RenamesItself 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\a708ea74d484795cce3aa84bdc3c8de65bea40ebe8df5d8219b26f7e35a4c575.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3056
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\a708ea74d484795cce3aa84bdc3c8de65bea40ebe8df5d8219b26f7e35a4c575.dll,#1
      2⤵
      • Suspicious behavior: RenamesItself
      PID:2820

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads