Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29/12/2023, 19:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
023d9e9742a378b55cbd778c66d2e6da.dll
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
023d9e9742a378b55cbd778c66d2e6da.dll
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
023d9e9742a378b55cbd778c66d2e6da.dll
-
Size
32KB
-
MD5
023d9e9742a378b55cbd778c66d2e6da
-
SHA1
9bc221b2545e9103a42ac18c5e199ca8fe683714
-
SHA256
2f1aaf160e692fc2c496437f6b93502ae9fde2f1223a6189fca4638199b90d3e
-
SHA512
aee1da53815c8e3017056396ef438b11b598aeac515f7acd68278d5a2172816498d3a39bdfff0c297291e9b4b39c7e2f9e7d48fb6e3faa50578f5b3072ecd777
-
SSDEEP
768:5bQqCiZHgb+X6glv+CrCgmUSacGo3VBffd6722MDylb0OqOSBRBw:5bhCiZAW6glv+CrCgmUSacGo3VBfQ72u
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1656 wrote to memory of 2440 1656 rundll32.exe 28 PID 1656 wrote to memory of 2440 1656 rundll32.exe 28 PID 1656 wrote to memory of 2440 1656 rundll32.exe 28 PID 1656 wrote to memory of 2440 1656 rundll32.exe 28 PID 1656 wrote to memory of 2440 1656 rundll32.exe 28 PID 1656 wrote to memory of 2440 1656 rundll32.exe 28 PID 1656 wrote to memory of 2440 1656 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\023d9e9742a378b55cbd778c66d2e6da.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1656 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\023d9e9742a378b55cbd778c66d2e6da.dll,#12⤵PID:2440
-