Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
62s -
max time network
53s -
platform
windows10-2004_x64 -
resource
win10v2004-20231130-es -
resource tags
-
submitted
12/12/2023, 02:18 UTC
General
-
Target
RC7/injector.dll
-
Size
19KB
-
MD5
a4db6b21f7398882100909f37c1067a4
-
SHA1
7b2a61d09e4959f4578b556196a8405a2f6e45f3
-
SHA256
d986554d185d3f4e827a1287322210ff6a143ed723d203efbf00a8757aa13714
-
SHA512
42bafe3ef80a748db64dfc88a159a06ee33cecb3f709f01d9c1a9e38d3ab81008f3226963c1c2e926f5e4b6e9442fd2f8a89b0fa5425d04db869cf7be7bddd31
-
SSDEEP
384:5xE24iKOgW7+uPOxQkWWma3NCx7cTuOJ9jIwq6Am:5JVKVxPXWWmgIx7cKOEZFm
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\RC7\injector.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\RC7\injector.dll,#12⤵
-
Network
-
DNSg.bing.comRemote address:8.8.8.8:53Requestg.bing.comIN A -
DNSg.bing.comRemote address:8.8.8.8:53Requestg.bing.comIN A
-
DNSg.bing.comRemote address:8.8.8.8:53Requestg.bing.comIN A
-
DNSg.bing.comRemote address:8.8.8.8:53Requestg.bing.comIN A
-
DNSg.bing.comRemote address:8.8.8.8:53Requestg.bing.comIN A
No results found
-
8.8.8.8:53g.bing.comdns
DNS Request
g.bing.com
DNS Request
g.bing.com
DNS Request
g.bing.com
DNS Request
g.bing.com
DNS Request
g.bing.com