Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2s -
max time network
70s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
11/01/2024, 04:22
Behavioral task
behavioral1
Sample
5285a5d022cc62bc8ed323b0b13a724e.dll
Resource
win7-20231215-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
5285a5d022cc62bc8ed323b0b13a724e.dll
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
5285a5d022cc62bc8ed323b0b13a724e.dll
-
Size
116KB
-
MD5
5285a5d022cc62bc8ed323b0b13a724e
-
SHA1
f2939d3254153a7fba8b32a968014f12cbea6cf8
-
SHA256
06192cde735029ee4c5ab3d00a3af143ac42c9a09fda9256c81f9e50e2d42dc6
-
SHA512
105188a7cf7a31348e0b781dc31389e0f2ae931954066cde66b29a524e81a8fd0be0e479265e6f878803215c1700210b80eafb24317baee82dc37cee6d767733
-
SSDEEP
3072:QwWAVbjkaC4G2Z/+A74xY+F/yKyOitpn/+fzZk2/f:WAV3jCK4x3F/sOitp/+f9n3
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/336-0-0x0000000010000000-0x0000000010057000-memory.dmp upx behavioral2/memory/336-18727-0x0000000010000000-0x0000000010057000-memory.dmp upx behavioral2/memory/336-38146-0x0000000010000000-0x0000000010057000-memory.dmp upx behavioral2/memory/336-49149-0x0000000010000000-0x0000000010057000-memory.dmp upx behavioral2/memory/336-59150-0x0000000010000000-0x0000000010057000-memory.dmp upx behavioral2/memory/336-76109-0x0000000010000000-0x0000000010057000-memory.dmp upx behavioral2/memory/336-97033-0x0000000010000000-0x0000000010057000-memory.dmp upx behavioral2/memory/336-119577-0x0000000010000000-0x0000000010057000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1812 wrote to memory of 336 1812 regsvr32.exe 15 PID 1812 wrote to memory of 336 1812 regsvr32.exe 15 PID 1812 wrote to memory of 336 1812 regsvr32.exe 15