Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24/12/2023, 18:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0b7772da26c0a250bcd315a4a26dc216.dll
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0b7772da26c0a250bcd315a4a26dc216.dll
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
0b7772da26c0a250bcd315a4a26dc216.dll
-
Size
844KB
-
MD5
0b7772da26c0a250bcd315a4a26dc216
-
SHA1
0188b407d4087c0b078ce9b20327fa155c451ab7
-
SHA256
43e5ede6f0ba1a3549712f00870a0bc0ebf5131991e790509133b1f8da965a86
-
SHA512
64152c43a5bdbe710f6d6f2cec04f4b4a997ddc6e8a693a6e57390e189c6bc27f57b82dc0cca900c427905fa409df5d1b5dcc2b2ec651fa64d71dbb44c660e92
-
SSDEEP
12288:6FVKRgN5GxZ73UI1koIAqCcQ6RrxfUTUoYlsqg8Iv:2qgN5APJR6RNcTxYOqG
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 3892 wrote to memory of 2768 3892 regsvr32.exe 87 PID 3892 wrote to memory of 2768 3892 regsvr32.exe 87 PID 3892 wrote to memory of 2768 3892 regsvr32.exe 87