Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
10/01/2024, 08:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5004690562ade9b3bcdafa783fd3630a.dll
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
5004690562ade9b3bcdafa783fd3630a.dll
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
5004690562ade9b3bcdafa783fd3630a.dll
-
Size
13KB
-
MD5
5004690562ade9b3bcdafa783fd3630a
-
SHA1
757d84cd2578821437f9da7a1a06e5a661f604b0
-
SHA256
77f6d525a53891f2eaad8551d2088b9a56f9b1a3d9c89c07eee4df14220bb05e
-
SHA512
a9531233e40457707bc1dbd5d12c2df006835ad95a7f770f53fafba3f6c2ebc1c0bcc75f8f666e5b21e2e71ba7a06776476aadee23e8542428ed2e4a11ea03f6
-
SSDEEP
192:nWBJvbCodKTfl0fnH2p7I24XopU4bWt9Z+dL+J3HtXoa2d:WbWxT+up7IxYiD+du5a
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2796 wrote to memory of 2704 2796 rundll32.exe 29 PID 2796 wrote to memory of 2704 2796 rundll32.exe 29 PID 2796 wrote to memory of 2704 2796 rundll32.exe 29 PID 2796 wrote to memory of 2704 2796 rundll32.exe 29 PID 2796 wrote to memory of 2704 2796 rundll32.exe 29 PID 2796 wrote to memory of 2704 2796 rundll32.exe 29 PID 2796 wrote to memory of 2704 2796 rundll32.exe 29
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5004690562ade9b3bcdafa783fd3630a.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2796 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5004690562ade9b3bcdafa783fd3630a.dll,#12⤵PID:2704
-