Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
24/12/2023, 14:32
General
-
Target
011d4a28ca475ba96d3d868ce262b991.dll
-
Size
402KB
-
MD5
011d4a28ca475ba96d3d868ce262b991
-
SHA1
613188d0e8c2a2fa48aae9079b37c11460f8d690
-
SHA256
e41b47a6e4c17bd8795929f7bfe011f6d06c2e82263bf503998a152e730f5b41
-
SHA512
4fca97123ad0bb02c2501e4cbadbe3edcced7080a01724209b221f507abb2a0233c8515cab61c4b1af0f7bb3d885a091a3558274e79548451ac6835c8cc2cb64
-
SSDEEP
12288:hpLPxEdOwRhnTvEcEMPCRxEV1dTdxGmnOtJq9DBpykK:HoTnBPCydTH7b3TK
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\011d4a28ca475ba96d3d868ce262b991.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\011d4a28ca475ba96d3d868ce262b991.dll,#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3724 -s 6883⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3724 -ip 37241⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
512KB
-
Filesize
300KB
-
Filesize
1024KB
-
Filesize
4KB
-
Filesize
1024KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
300KB
-
Filesize
512KB