Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
130s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
22/12/2023, 10:33
General
-
Target
RC7ForSyntax2016/Regret.dll
-
Size
217KB
-
MD5
508a74324c3245a08a9c898d1543112e
-
SHA1
570985dc1f08283718cb421ade8e20fcfd95aae3
-
SHA256
9b211d6f728f4061800353e63dd60cb96764e0c185d362e02c6fa21c1522a954
-
SHA512
1d1910dd7bec295862130e57c9202c4787518dddfd80a01444704508becc09904359824eafcf8799fe3b0345bb3c0b78d6cffc6081a338fc5e311c5d2c90add0
-
SSDEEP
6144:Leqi7pK/yPAgC/KPlUwe+Uw28OIRT4moOSeTrcqKg:LeqApYyPAnKGwjOIRkmoOSUc9
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\RC7ForSyntax2016\Regret.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\RC7ForSyntax2016\Regret.dll,#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3524 -s 5643⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 3524 -ip 35241⤵