Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
22/10/2023, 17:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.928780e09f6ebb9df58351b70bef3c90.dll
Resource
win7-20231020-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.928780e09f6ebb9df58351b70bef3c90.dll
Resource
win10v2004-20231020-en
1 signatures
150 seconds
General
-
Target
NEAS.928780e09f6ebb9df58351b70bef3c90.dll
-
Size
6KB
-
MD5
928780e09f6ebb9df58351b70bef3c90
-
SHA1
89da07de0ffa599b064d29d87f0ae0ae02f23219
-
SHA256
b75c597473a1f7d06f51287dd1cba32ccdc0a7eba1284a0657827f174f770b1c
-
SHA512
149304a16dc698ad9717ec39355c50b0dfb7d2c4ee6e7e4c4a4604060f2f698c38ed933ffe029d1ad5d20744a9bb8aa2b082f74248884b5590f63a5ce7fdf64a
-
SSDEEP
96:nEY2RrF1eqwi49fJ6VAcN9wempelW/gJCq4Edp1/gb5Icxgva:EHRh1eppIAcNO78BfJgNISgva
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4908 wrote to memory of 844 4908 rundll32.exe 75 PID 4908 wrote to memory of 844 4908 rundll32.exe 75 PID 4908 wrote to memory of 844 4908 rundll32.exe 75
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\NEAS.928780e09f6ebb9df58351b70bef3c90.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:4908 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\NEAS.928780e09f6ebb9df58351b70bef3c90.dll,#12⤵PID:844
-