Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 21:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1c80fd6172a39ef22bb03696f29eaeda.dll
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
1c80fd6172a39ef22bb03696f29eaeda.dll
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
1c80fd6172a39ef22bb03696f29eaeda.dll
-
Size
260KB
-
MD5
1c80fd6172a39ef22bb03696f29eaeda
-
SHA1
ade7a0bf7a5cdad6938d2bdfba77553c59d164a9
-
SHA256
278fe575ad13f810257509ab1cac4da1d41fe551c121ab0efed3df04d7db4d23
-
SHA512
07129ffe3aacb5f0885d9b27ed66e90d6353450a1214f25426b38db681ae7dcb04fc1d9cb53797e6e220c15379e031fa661c8f1284efa0ea417126ab49ca57d9
-
SSDEEP
3072:M45G/3mX+Qvx9HryKMcZkZTm/tuN7DS0Ef2f9hNREXoZDKHTa2tbvaINX9:KmDJNMPdS0P9DWN
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 3328 wrote to memory of 2136 3328 rundll32.exe 87 PID 3328 wrote to memory of 2136 3328 rundll32.exe 87 PID 3328 wrote to memory of 2136 3328 rundll32.exe 87
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1c80fd6172a39ef22bb03696f29eaeda.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:3328 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1c80fd6172a39ef22bb03696f29eaeda.dll,#12⤵PID:2136
-