Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
30/12/2023, 07:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
129e7d55de3f331f8f3b8ae17bb85a04.dll
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
129e7d55de3f331f8f3b8ae17bb85a04.dll
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
129e7d55de3f331f8f3b8ae17bb85a04.dll
-
Size
588KB
-
MD5
129e7d55de3f331f8f3b8ae17bb85a04
-
SHA1
42aac8cb4612c7640e3f8e6bdf0c0637109bdfdf
-
SHA256
26adb13ddf47987e3e84f554620ed113cc6b86755bd82b0c1c7d1eed6a2656f8
-
SHA512
1a8d2f899b56288989f2d7d2c7b7dc2d816b1e3227f2948fa8b2101a43d14839a1c9ec87e7b715307aa129ef30bbe039dded032f5168a3d2db3c2418deaf2150
-
SSDEEP
768:w58e3rjYY2uXZ9hAVaYUStKIZ+2fJcwqVETAz4HMBbsjjRGPZMo4/V:HbY2IGM7IZ+nVETAzFs1foo
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1984 wrote to memory of 2676 1984 regsvr32.exe 24 PID 1984 wrote to memory of 2676 1984 regsvr32.exe 24 PID 1984 wrote to memory of 2676 1984 regsvr32.exe 24 PID 1984 wrote to memory of 2676 1984 regsvr32.exe 24 PID 1984 wrote to memory of 2676 1984 regsvr32.exe 24 PID 1984 wrote to memory of 2676 1984 regsvr32.exe 24 PID 1984 wrote to memory of 2676 1984 regsvr32.exe 24