Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
07/01/2024, 21:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
49d57f999058b0e0c1a44b1ef3056543.dll
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
49d57f999058b0e0c1a44b1ef3056543.dll
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
49d57f999058b0e0c1a44b1ef3056543.dll
-
Size
158KB
-
MD5
49d57f999058b0e0c1a44b1ef3056543
-
SHA1
f6886fa1b4182ebd7b6102020fbbed4a31433673
-
SHA256
b313f70a6ce680947ed27a33c1132cee4f6883c9294e5fb3944a0426da71d675
-
SHA512
7de2fe70e1a4d38ff67a9ea3b601cacad067c1c9f6861ef1e13689572a4852585e01ead32ae3bac8b1d95f10d9698666ed9919e81552b0023cb4a963a2f3bea1
-
SSDEEP
3072:46LIAvKfXI2BHbqw9pQCN/jjW2LExvI+C2BH:lLIAifXTrQejjW2LLy
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 3064 wrote to memory of 2644 3064 regsvr32.exe 28 PID 3064 wrote to memory of 2644 3064 regsvr32.exe 28 PID 3064 wrote to memory of 2644 3064 regsvr32.exe 28 PID 3064 wrote to memory of 2644 3064 regsvr32.exe 28 PID 3064 wrote to memory of 2644 3064 regsvr32.exe 28 PID 3064 wrote to memory of 2644 3064 regsvr32.exe 28 PID 3064 wrote to memory of 2644 3064 regsvr32.exe 28