Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 22:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1f26046250747d9c686c137eb06ec0f6.dll
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
1f26046250747d9c686c137eb06ec0f6.dll
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
1f26046250747d9c686c137eb06ec0f6.dll
-
Size
57KB
-
MD5
1f26046250747d9c686c137eb06ec0f6
-
SHA1
0913e7782795923b446efeb7b9c6690d0c42dbc9
-
SHA256
6bcb630f51140b47ccc250ef339fdd8c91590c8acfed611de1ab54648c464ab5
-
SHA512
add5aa7b7ea093e97bb487c0c311105e5d77d5811759dc4e73010c3abbeb6b67317775c7fdfc28e1dde31b980053f400d58ae6dc63e3f2838e257d2f180af8ab
-
SSDEEP
1536:zZm6JoL+XnD8iVTptNWLw4m9ZhtX1kLX:z8LKnD8iDtNi1mjz1kL
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4688 wrote to memory of 1584 4688 rundll32.exe 88 PID 4688 wrote to memory of 1584 4688 rundll32.exe 88 PID 4688 wrote to memory of 1584 4688 rundll32.exe 88
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1f26046250747d9c686c137eb06ec0f6.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:4688 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1f26046250747d9c686c137eb06ec0f6.dll,#12⤵PID:1584
-