Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01/01/2024, 05:00

General

  • Target

    a018d1855015e0e2b2fb3caf93274a9090ad1ff0ed358ce99a61fcecf708f33f.dll

  • Size

    2.4MB

  • MD5

    0776440319a6a8bcaa1abb698a29f6d8

  • SHA1

    2a88892e4b269304fd8b5691b82042d6da4a6202

  • SHA256

    a018d1855015e0e2b2fb3caf93274a9090ad1ff0ed358ce99a61fcecf708f33f

  • SHA512

    cdb1b79f26bc9b7c56dd2c6d704aea241010cb663510560c95a4d180d9cdad6f72f43b31ff29bac049f600b86e5cc73abe37e352f0be420c18f39d5e8aced78c

  • SSDEEP

    49152:fZVaoXPXhz5Kux8eklz6oVV+up9F3SNlB5LtOmS3BAh2VK5KvWd:f3aofxz5KuOeYD+ubQXB5LtOf85Kvi

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\a018d1855015e0e2b2fb3caf93274a9090ad1ff0ed358ce99a61fcecf708f33f.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2348
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\a018d1855015e0e2b2fb3caf93274a9090ad1ff0ed358ce99a61fcecf708f33f.dll,#1
      2⤵
        PID:2644

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2644-1-0x0000000010000000-0x0000000010271000-memory.dmp

      Filesize

      2.4MB

    • memory/2644-0-0x00000000000C0000-0x00000000000C6000-memory.dmp

      Filesize

      24KB

    • memory/2644-5-0x00000000009D0000-0x0000000000AF3000-memory.dmp

      Filesize

      1.1MB

    • memory/2644-6-0x00000000022B0000-0x00000000023B6000-memory.dmp

      Filesize

      1.0MB

    • memory/2644-9-0x00000000022B0000-0x00000000023B6000-memory.dmp

      Filesize

      1.0MB

    • memory/2644-10-0x00000000022B0000-0x00000000023B6000-memory.dmp

      Filesize

      1.0MB