Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25/12/2023, 08:34
General
-
Target
1249410eeed6e62d2c69053f0a0edd2b.dll
-
Size
162KB
-
MD5
1249410eeed6e62d2c69053f0a0edd2b
-
SHA1
ac87a27e66c1a75a069ce08b35fbcbbb2d88877a
-
SHA256
7dfa9b34f3647f56c5508cb86800fc35ae504b499826efa01f4d8bca0c4176dc
-
SHA512
3261d595f6afca9e44411f839d52a1487107b4f893de00b1b0086257f74beb30c17491cf9506af37c3b1e0f5f8f8000fd29e74b3ce3bdf0b85b1615a46e20e3c
-
SSDEEP
3072:vEZB94/pzXckR9TsCz8fjfkjJmh02zW7GDkHxSmwAg:vGABzMg9ngQ1mh07ywS7Ag
Score
8/10
Malware Config
Signatures
-
Blocklisted process makes network request 8 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1249410eeed6e62d2c69053f0a0edd2b.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1249410eeed6e62d2c69053f0a0edd2b.dll,#12⤵
- Blocklisted process makes network request
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB