Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24/12/2023, 23:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
18a4141c8a467bf2f8cc274672daa87d.dll
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
18a4141c8a467bf2f8cc274672daa87d.dll
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
18a4141c8a467bf2f8cc274672daa87d.dll
-
Size
37KB
-
MD5
18a4141c8a467bf2f8cc274672daa87d
-
SHA1
112fec90a83dff00748ca92fa069be8ec8e7cf2e
-
SHA256
59c323b082e86f8a36501ecc2aa5dbb1df7c0399bff58825ff1cb245cd4b8573
-
SHA512
8980a87643ce9a4bf79ced189de78dc931c8cc0845124cf2d5205ae41a855051b50a91f28641915bc96cf670e1e56e649ce65776cb64efc2361aa62497157af5
-
SSDEEP
768:BHLNNwWBcaXbpzA6w/4I2NQPx57uQdUikbvlVObXYTRyX5:pv/eaaz2KH7ugUTP9TRc
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2556 wrote to memory of 3712 2556 rundll32.exe 90 PID 2556 wrote to memory of 3712 2556 rundll32.exe 90 PID 2556 wrote to memory of 3712 2556 rundll32.exe 90
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\18a4141c8a467bf2f8cc274672daa87d.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2556 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\18a4141c8a467bf2f8cc274672daa87d.dll,#12⤵PID:3712
-