Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
04/11/2023, 22:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.da294735c08a4216927fb88dc84e2d10_JC.dll
Resource
win7-20231020-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.da294735c08a4216927fb88dc84e2d10_JC.dll
Resource
win10v2004-20231020-en
1 signatures
150 seconds
General
-
Target
NEAS.da294735c08a4216927fb88dc84e2d10_JC.dll
-
Size
6KB
-
MD5
da294735c08a4216927fb88dc84e2d10
-
SHA1
396eaf8a431d34f2366e56d64b724f7dbc5d2beb
-
SHA256
6aa4b11ac815fa3887932a74ed802470fe1887284861142ee9e30271deadd3bf
-
SHA512
d126144a7cd385181fc1f1d6eff53ff93545a76e448713c0d29723f49872b33268cc9da99309d650b8e48b55b65babb4fdd15c220d56b281e0632a6e393b0038
-
SSDEEP
96:hy859x0P8MagG9kJJ6DBk6XKULQBFw5LdH6knkb1ymDPVVm+n/uYddr:F5oLpJ6DnQBC5symDtVmI/t
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2156 wrote to memory of 932 2156 rundll32.exe 86 PID 2156 wrote to memory of 932 2156 rundll32.exe 86 PID 2156 wrote to memory of 932 2156 rundll32.exe 86
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\NEAS.da294735c08a4216927fb88dc84e2d10_JC.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2156 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\NEAS.da294735c08a4216927fb88dc84e2d10_JC.dll,#12⤵PID:932
-