Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29/12/2023, 23:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
06f5d72511942c43bc05099625d05ad7.dll
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
06f5d72511942c43bc05099625d05ad7.dll
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
06f5d72511942c43bc05099625d05ad7.dll
-
Size
94KB
-
MD5
06f5d72511942c43bc05099625d05ad7
-
SHA1
3a7de891edd9353e7639707b0bc956b44ee46543
-
SHA256
f4827f92fe5beea3ebafe0932bb238244640063844b614d71caa2d6b2400a50a
-
SHA512
a9ffa5723f9ac3ebf338558e66c07169619ca3791c7825cd67d6d03b63edb73424d95ea0b2b51666228d4640da70bf435dbff92a209a522bfd189a6520ca421e
-
SSDEEP
1536:LtpCNcge6I+BOZcuI/N+ZakLmSIg4TotPOhr/nswUkoYgLnlmQub:xpCrza9qN+Za1RTo7wUAgLlBs
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2468 wrote to memory of 2476 2468 rundll32.exe 14 PID 2468 wrote to memory of 2476 2468 rundll32.exe 14 PID 2468 wrote to memory of 2476 2468 rundll32.exe 14 PID 2468 wrote to memory of 2476 2468 rundll32.exe 14 PID 2468 wrote to memory of 2476 2468 rundll32.exe 14 PID 2468 wrote to memory of 2476 2468 rundll32.exe 14 PID 2468 wrote to memory of 2476 2468 rundll32.exe 14
Processes
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#11⤵PID:2476
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\06f5d72511942c43bc05099625d05ad7.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2468