Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
13/01/2024, 23:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
59a48425bba2d47255382fba8d3ff00a.dll
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
59a48425bba2d47255382fba8d3ff00a.dll
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
59a48425bba2d47255382fba8d3ff00a.dll
-
Size
1KB
-
MD5
59a48425bba2d47255382fba8d3ff00a
-
SHA1
a2d6d03b8883dbd998dd23cfd0983d916fff8a19
-
SHA256
b964276e021c088fcb87d3cf99c79575aba5f2cadce5561893db6890ec282208
-
SHA512
f056c4ba718e5e5a335c7bedf2fc908849f91bfe9aac18d20dd19c26abe83f1241fd62ee46be9a8925a45bb5cf0612ca5c956fb8204242f9339f21d47cf9ef8b
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1724 wrote to memory of 1948 1724 rundll32.exe 28 PID 1724 wrote to memory of 1948 1724 rundll32.exe 28 PID 1724 wrote to memory of 1948 1724 rundll32.exe 28 PID 1724 wrote to memory of 1948 1724 rundll32.exe 28 PID 1724 wrote to memory of 1948 1724 rundll32.exe 28 PID 1724 wrote to memory of 1948 1724 rundll32.exe 28 PID 1724 wrote to memory of 1948 1724 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\59a48425bba2d47255382fba8d3ff00a.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1724 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\59a48425bba2d47255382fba8d3ff00a.dll,#12⤵PID:1948
-