Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
465s -
max time network
457s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
29/12/2023, 08:01
General
-
Target
_94C8A56AFEEC9D34E03A0A2DA14CF8BE.dll
-
Size
304KB
-
MD5
d69a5604a8e4403c8e44f4f796b7bc40
-
SHA1
712069d70624116e97ab83449aa60e7999bdf9cf
-
SHA256
13e875c1af89c70b9d6dbe56bebb2319e9ec58c3d5ff4c1441bf9c983605edab
-
SHA512
3f67b807622bb30fd903cd8b6211b02fba0c74f6305edacf122050b5f82e1901e800f13ee6d245081ced66f411c1d23fe90e77a6070ca32deab83984b6db986e
-
SSDEEP
6144:ry6Z8DewD7A3x6DOrbwBAWsAHQVOMi1WNeTLIJgvSg5nUxnK/aw:ry6Z4eqA3xFwBAWsAHQ8Mi1yeTLlSg5t
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\_94C8A56AFEEC9D34E03A0A2DA14CF8BE.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\_94C8A56AFEEC9D34E03A0A2DA14CF8BE.dll,#12⤵
-
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB