Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    03/11/2023, 18:44

General

  • Target

    0b14a9dc05f32714e688a057cb7920ec6ed1a7956f70f585c15da49db132bde3.dll

  • Size

    79KB

  • MD5

    1027a05cac528bd301ffdb58847577fb

  • SHA1

    9edc19b7e0e1717ae385c867b3dec2800a05c2f1

  • SHA256

    0b14a9dc05f32714e688a057cb7920ec6ed1a7956f70f585c15da49db132bde3

  • SHA512

    7a01fe8c4013579d56f922c9adef47cff21662a7a2037e0b71cc6abcc6b65bd0f8df1fd7ff4d2b369d71e95cf4d3faed4bea3224234ac0fc69ecc1aa7bcb752b

  • SSDEEP

    1536:C5pBHyed9yBwTnvERG94v6ZfxlVAuKvcFtg+4pN3cgS:C5fSed9yBmvE64v6ZfxwuKvciN3cX

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0b14a9dc05f32714e688a057cb7920ec6ed1a7956f70f585c15da49db132bde3.dll,#1
    1⤵
      PID:1264

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1264-0-0x0000000180000000-0x0000000180018000-memory.dmp

      Filesize

      96KB

    • memory/1264-1-0x0000000180000000-0x0000000180018000-memory.dmp

      Filesize

      96KB

    • memory/1264-2-0x0000000180000000-0x0000000180018000-memory.dmp

      Filesize

      96KB

    • memory/1264-3-0x0000000140000000-0x00000001405E8000-memory.dmp

      Filesize

      5.9MB

    • memory/1264-5-0x000007FF70450000-0x000007FF7045A000-memory.dmp

      Filesize

      40KB

    • memory/1264-4-0x000007FF346C0000-0x000007FF34709000-memory.dmp

      Filesize

      292KB

    • memory/1264-6-0x0000000000100000-0x000000000015E000-memory.dmp

      Filesize

      376KB

    • memory/1264-7-0x000007FF404C0000-0x000007FF40580000-memory.dmp

      Filesize

      768KB

    • memory/1264-8-0x000007FF709E0000-0x000007FF709F4000-memory.dmp

      Filesize

      80KB

    • memory/1264-9-0x0000000000100000-0x0000000000106000-memory.dmp

      Filesize

      24KB