Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
12/10/2023, 04:09
General
-
Target
c71d64f23101796b72bc62b4171575eff4a535e9725bec3af839d1c37ba87de9.dll
-
Size
3.9MB
-
MD5
e5ef529a9b6e8ce7e6861c135c0c565b
-
SHA1
7f26017b5fa4d8d5133464b24343d975af80ab15
-
SHA256
c71d64f23101796b72bc62b4171575eff4a535e9725bec3af839d1c37ba87de9
-
SHA512
6b1dcc3daaac984c16a9ddb303143cbddc44ec53269bf81ffa7405877039fe2a157031841f225ad59780c2b43fe31a3d795d43c6eb2aec6de3533b5ab714df87
-
SSDEEP
98304:lAfSQpa9otdlRpPhjMIjNhR2zm1Ixh6lyWfvC:lmrpa985jdWb6dC
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
VMProtect packed file 2 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c71d64f23101796b72bc62b4171575eff4a535e9725bec3af839d1c37ba87de9.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c71d64f23101796b72bc62b4171575eff4a535e9725bec3af839d1c37ba87de9.dll,#12⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
8.7MB